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(54) INFORMATION PROCESSING SYSTEM, INFORMATION PROCESSING METHOD, AND 
INFORMATION PROCESSING DEVICE 



(57) Prior to data transmission, a protocol for per- 
forming mutual authentication and sharing a plurality of 
encryption keys is executed between a CPU 12 on the 
side of a data transmission apparatus 10 and a CPU 22 
on the side of a data receiving apparatus 20. The data 
transmission apparatus 10 causes the CPU 12 to 
encrypt data requiring the assurance of a transmission 
band by a first encryption key and to transmit the data in 
a first transmission mode via an input/output interface 
16, and also to encrypt related data relating to the data 
by a second encryption key and to transmit the related 
data in a second transmission mode via the input/output 
interface 16. The data receiving apparatus 20 causes 
the CPU 22 to decode, by a first encryption key, the data 
requiring the assurance of a transmission band 
received in the first transmission mode via an input/out- 
put interface 24, and also to decode, by a second 
encryption key, the related data received in the second 
transmission mode via the input/output interface 24. 
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Description 
Technical Field 

[0001] This invention relates to an information 
processing system, an information processing method 
and an information processing apparatus for carrying 
out transmission of data via an interface having a first 
transmission mode in which a transmission band is 
ensured and a second transmission mode in which a 
transmission band is not ensured. 

Background Art 

[0002] Recently, for example, systems in which a 
plurality of AV apparatuses are connected via a digital 
interface at homes for transmitting and recording digital 
data such as music information, video information or the 
like are becoming popular. 

[0003] For example, in an apparatus such as a 
video camera, a DVD player or the like having an inter- 
face of the IEEE (Institute of Electrical and Electronics 
Engineers) 1394 high-performance serial bus (hereinaf- 
ter simply referred to as the IEEE 1394 serial bus), 
since data can be recorded with high fidelity, it is neces- 
sary to prevent data from being illegally copied. 
[0004] For example, a key is stored indicating 
whether or not recording of movie information onto a 
magneto-optical disc apparatus is permitted, and by 
using this key, authentication is performed as to whether 
the magneto-optical disc apparatus is an authorized 
apparatus, that is, an apparatus which has received a 
license from the copyright holder. Thus, recording of the 
movie information onto only a magneto-optical disc 
apparatus which is authenticated as an authorized unit 
is permitted. In such a case, it is necessary to perform 
authentication of the counterpart apparatus between an 
apparatus on the side which transmits movie informa- 
tion (hereinafter referred to as a source) and an appara- 
tus on the side which receives the transmission 
(hereinafter referred to as a sink). 
[0005] For the purpose of protecting copyright in 
such a system, various authentication methods have 
been proposed. For an authentication protocol used for 
these authentication methods, an encryption algorithm 
is often used. 

[0006] Meanwhile, when transmitting music data 
between apparatuses, for example, if transmission is 
stopped during the transmission of the music data or if 
the quantity of data which can be transmitted is 
extremely reduced, it becomes impossible for the 
receiving side to obtain data required for playback and 
the music might be interrupted. Therefore, it is neces- 
sary to transmit music data in a state where a band of a 
certain extent is secured. 

[0007] On the other hand, when transmitting infor- 
mation which is not music data itself but is related to 
music data, for example, lyrics, a photograph of an artist 
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or the like, the real-time property is not required in com- 
parison with the case of transmitting the music data 
itself. Therefore, it is possible to transmit the information 
by using a transmission method in which a transmission 
5 band is not secured. In general, it is often desired to use 
the transmission method In which a transmission band 
is not secured, because the band of the entire transmis- 
sion line is not used. 

w Disclosure of the Invention 

[0008] Thus, in view of the foregoing status of the 
art, it is an object of the present invention to provide an 
information processing system, an information process- 

15 ing method and an information processing apparatus in 
which two types of transmission modes, that is, a trans- 
mission mode in which a transmission band is secured 
and a transmission mode in which a transmission band 
is not secured, are employed so as to enable reliable 

20 transmission of data. 

[0009] It is another object of the present invention to 
provide an information processing system, an informa- 
tion processing method and an information processing 
apparatus in which data requiring the assurance of a 

25 transmission band and related data relating to the data 
are encrypted by different encryption keys so as to ena- 
ble safe transmission. 

[0010] It is a further object of the present invention 
to provide an information processing system, an infor- 
30 mation processing method and an information process- 
ing apparatus which enable authentication of an 
information processing apparatus on a transmission 
side and an information processing apparatus on a 
receiving side with respect to each other and which ena- 

35 ble sharing of an encryption key. 

[001 1 ] An information processing system according 
to the present invention comprises: a first information 
processing apparatus comprising an interface having a 
first transmission mode in which a transmission band is 

40 ensured and a second transmission mode in which a 
transmission band is not ensured, and transmission 
control means for encrypting data requiring the assur- 
ance of the transmission band by a first encryption key 
and then transmitting the data in the first transmission 

45 mode via the interface and for encrypting related data 
relating to the data by a second encryption key and then 
transmitting the related data in the second transmission 
mode via the interface; and a second information 
processing apparatus comprising an interface having a 

so first transmission mode in which a transmission band is 
ensured and a second transmission mode in which a 
transmission band is not ensured, and receiving control 
means for decoding, by the first encryption key, the data 
requiring the assurance of the transmission band which 

55 is received in the first transmission mode via the inter- 
face and for decoding, by the second encryption key, the 
related data received in the second transmission mode 
via the interface. 
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[0012] An information processing method accord- 
ing to the present invention is adapted for performing 
data transmission between a first information process- 
ing apparatus and a second information processing 
apparatus via an interface having a first transmission 5 
mode in which a transmission band is ensured and a 
second transmission mode in which a transmission 
band is not ensured. The method comprises the steps 
of: encrypting data requiring the assurance of the trans- 
mission band from the first information processing 10 
apparatus by a first encryption key and then transmitting 
the data in the first transmission mode, while encrypting 
related data relating to the data by a second encryption 
key and then transmitting the related data in the second 
transmission mode; and decoding, by the first encryp- 15 
tion key on the side of the second information process- 
ing apparatus, the data requiring the assurance of the 
transmission band which is received in the first trans- 
mission mode, and decoding, by the second encryption 
key, the related data received in the second transmis- 2 o 
sion. 

[0013] Also, an information processing apparatus 
according to the present invention comprises: an inter- 
face having a first transmission mode in which a trans- 
mission band is ensured and a second transmission 25 
mode in which a transmission band is not ensured; and 
transmission control means for encrypting data requir- 
ing the assurance of the transmission band by a first 
encryption key and then transmitting the data in the first 
transmission mode via the interface and for encrypting 30 
related data relating to the data by a second encryption 
key and then transmitting the related data in the second 
transmission mode via the interface. 
[0014] Also, an information processing apparatus 
according to the present invention comprises: an inter- 35 
face having a first transmission mode in which a trans- 
mission band is ensured and a second transmission 
mode in which a transmission band is not ensured; and 
receiving control means for decoding, by a first encryp- 
tion key, the data requiring the assurance of the trans- 40 
mission band which is received in the first transmission 
mode via the interface and for decoding, by a second 
encryption key, the related data received in the second 
transmission mode via the interface. 

45 

Brief Description of the Drawings 
[0015] 

Fig. 1 is a block diagram showing the overall con- so 
struction of a digital satellite broadcast system 
including an AV system to which the present inven- 
tion is applied. 

Fig. 2 is a block diagram showing the construction of 

a ground station in the digital satellite broadcast 55 

system. 

Fig.3 is a view showing data transmitted from the 
ground station. 



Figs.4A to 4H are explanatory views showing the 
time-division multiplexing structure of transmission 
data. 

Fig. 5 is a block diagram showing the construction 
of a data transmission system to which the present 
invention is applied. 

Fig.6 is an explanatory view schematically showing 
the structure of an IEEE 1394 bus cable. 
Rgs.7A to 7C are explanatory views schematically 
showing a signal transmission mode in IEEE 1394. 
Fig. 8 is an explanatory view showing the overview 
of packet transmission in IEEE 1394. 
Rg.9 is a block diagram showing the construction of 
an essential portion of a data transmission appara- 
tus in the data transmission system. 
Fig.10 is a flowchart showing the operation of the 
data transmission apparatus. 

Rg.1 1 is a flowchart showing the procedure of data 
transmission in the data transmission system. 
Fig. 12 is a flowchart showing the processing proce- 
dure on the data transmission apparatus side in the 
data transmission system. 

Fig.1 3 is a flowchart showing the processing proce- 
dure on the data receiving apparatus side in the 
data transmission system. 

Fig. 14 is a flowchart showing another procedure of 
data transmission in the data transmission system. 
Fig. 15 is a flowchart showing another processing 
procedure on the data transmission apparatus side 
in the data transmission system. 
Fig.16 is a flowchart showing another processing 
procedure on the data receiving apparatus side in 
the data transmission system. 

Best Mode for Carrying Out the Invention 

[0016] Preferred embodiments of the present inven- 
tion will now be described with reference to the draw- 
ings. 

[0017] The present invention is applicable to a data 
transmission system (AV system) in which electronic 
apparatuses such as various types of digital AV (audio- 
visual) apparatuses, personal computer units and the 
like are interconnected via, for example, the IEEE (Insti- 
tute of Electrical and Electronics Engineers) 1394 bus 
so that data can be transmitted and received among the 
apparatuses. In this AV system, a construction is 
adopted which enables reception of digital satellite 
broadcast and downloading of the received data. 
[0018] The overall construction of the digital satel- 
lite broadcast system including this AV system is shown 
in Fig. 1 . 

[0019] In the digital satellite broadcast system 
shown in Fig. 1, materials for television program broad- 
cast from a TV program material server 106, materials 
for music data from a music material server 107, sound 
addition information from a sound-addition-information 
server 1 08, and GUI (graphical user interface) data from 
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a GUI data server 109 are sent to a ground station 101 
for digital satellite broadcast. 

[0020] The TV program material server 106 is a 
server for providing materials for a normal broadcast 
program. Materials for music broadcast sent from the 
TV program material server are contain dynamic 
images and sounds. For example, if the program is a 
music broadcast program, dynamic images and sounds 
for promotion of a new music piece are broadcast by 
using the materials of the dynamic Images and sounds 
of the TV program material server 1 06. 
[0021] The music material server 1 07 is a server for 
providing an audio program by using an audio channel. 
Materials for this audio program consist of sounds only. 
The music material server 107 transmits the materials 
of the audio program of a plurality of audio channels to 
the ground station 101 . 

[0022] In program broadcast of each audio channel, 
the same music piece is broadcast repeatedly for a pre- 
determined unit time. Each of the audio channels is 
independent of the others and various methods can be 
conceived for the use thereof. For example, in one audio 
channel, several pieces of the latest Japanese pop 
music are repeatedly broadcast for a particular fixed 
time period, and in another channel, several pieces of 
the latest pop music abroad are repeatedly broadcast 
for a particular fixed time period. 

[0023] The sound-addition -information server 108 
is a server for providing time information or the like of a 
music piece outputted from the music material server 
107. 

[0024] The GUI data server 109 provides "GUI 
data" for forming a GUI screen used by a user for an 
operation. For example, if the screen is a GUI screen for 
downloading a music piece, as will be later described, 
the GUI data server 109 provides image data for form- 
ing a page of a list of music pieces to be distributed and 
an information page for each music piece, text data, and 
a still picture of the album jacket. Furthermore, EPG 
(electrical program guide) data used to display a pro- 
gram list, which is called EPG, on the AV system 103 
side is also provided from here. 

[0025] For the "GUI data", for example, an MHEG 
(Multimedia Hypermedia Information Coding Experts 
Group) system is employed. MHEG is an international 
standard for description of a scenario, for recognizing 
multimedia information, procedure, operation and the 
combination thereof as objects, then coding these 
objects, and producing a title (e.g., GUI screen). In this 
digital satellite broadcast system, MHEG-5 is employed. 
[0026] The ground station 1 01 multiplexes the infor- 
mation transmitted from the TV program material server 
1 06, the music material server 1 07, the sound-addition- 
information server 108 and the GUI data server 109, 
and transmits it. 

[0027] In this digital satellite broadcast system, the 
video data transmitted from the TV program material 
server 106 is compressed and coded by the MPEG 



(Moving Picture Experts Group) 2 system, and audio 
data is compressed and coded by the MPEG2 audio 
system. The audio data transmitted from the music 
material server 107 is compressed and coded, for 
s example, by either the MPEG2 audio system or the 
ATRAC (Adaptive Transform Acoustic Coding) system, 
corresponding to each audio channel. 
[0028] In multiplexing these data, the data are 
encrypted by using key information from a key informa- 
10 tion server 110. 

[0029] A signal from the ground station 101 is 
received by a receiving equipment (hereinafter also 
referred to as AV system) 1 03 at each home via a satel- 
lite 102. A plurality of transponders are mounted in the 
is satellite 1 02. One transponder has a transmission capa- 
bility of, for example, 30 Mbps. The AV system 103 of 
each home has an IRD (integrated receiver decoder) 
1 1 2 connected to a parabolic antenna 111, and also has 
a monitor unit 1 14 and an MD recorder/player 1 which 
are connected to the IRD 1 1 2. The AV system 103 also 
has a remote controller 64 for performing an operation 
in the IRD 112, and a remote controller 32 for perform- 
ing an operation in the MD recorder/player 1 . 
[0030] In this AV system 103, a signal which is 
broadcasted via the satellite 102 is received by the par- 
abolic antenna 111. This received signal is converted to 
a predetermined frequency by an LNB (low noise block 
down-converter) 1 15 mounted in the parabolic antenna 

111 and is supplied to the I RD 1 1 2. 
[0031 ] As a basic operation in the IRD 1 1 2, a signal 
of a predetermined channel is selected from the 
received signal, demodulation of video data and audio 
data as a program is performed from the channel- 
selected signal, and the resulting signals are outputted 
as a video signal and an audio signal. Also, in the IRD 
1 12, output as a GUI screen is performed on the basis 
of the GUI data which is multiplexed and transmitted 
together with data as a program. Such output of the IRD 

112 is supplied to, for example, the monitor unit 114. 
Thus, in the monitor unit 114, display of the image and 
output of the sound of the program which is received 
and channel-selected by the IRD 112 are performed, 
and it becomes possible to display the GUI screen in 
accordance with the operation by the user. 
[0032] The MD recorder/player 1 is a recording and 
playback apparatus capable of recording audio data 
onto and play back audio data from a loaded mini-disc. 
Also, this MD recorder/player 1 is capable of recording 
audio data (music data) and still image data (picture file) 
such as an album jacket associated with the audio data, 
and text data (text file) such as lyrics, liner notes and the 
like onto a disc, and is capable of playing back and out- 
putting the recorded data of the picture file, the text file 
and the like in synchronization with the playback time of 

55 the audio data. 

[0033] The data of the picture file, the text file and 
the like appended to the audio data is also called "AUX 
data" as a matter of convenience in accordance with the 
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handling in the MD recorder/player 1 f as will be 
described later. 

[0034] In the AV system 1 03, it is assumed that the 
IRD 112 and the MD recorder/player 1 are intercon- 
nected by an IEEE 1394 bus 116. 
[0035] In short, each of the IRD 112 and the MD 
recorder/player 1 constituting the AV system 103 has a 
data interface conforming to the IEEE 1394 standard as 
the data transmission standard. 

[0036] Thus, in this AV system, the audio data 
(downloaded data) as a music piece received by the 
IRD 112 can be directly inputted and recorded as it 
remains compressed by the ATRAC system. Also, the 
AUX data uploaded together with the audio data to the 
satellite from the transmission side can be downloaded 
and recorded onto the MD recorder via the IRD 112 
from the satellite. 

[0037] The IRD 112 is capable of communicating 
with an accounting server 105 via a telephone line 104. 
An IC card on which various types of information is 
stored is inserted into the IRD 11 2. Then, for example, if 
audio data of a music piece is downloaded, history infor- 
mation regarding this is stored onto the IC card. The 
information on this IC card is sent to the accounting 
server 105 at a predetermined opportunity and timing 
via the telephone line 104. The accounting server 105 
performs accounting by setting the amount in accord- 
ance with the received history information and thus 
charges the user. 

[0038] As can be understood from the foregoing 
description, in the digital satellite broadcast system 
including the AV system to which the present invention 
is applied, the ground station 101 multiplexes the video 
data and audio data, which are materials for music pro- 
gram broadcast from the TV program material server 
1 06, the audio data, which are materials for the audio 
channel from the music material server 107, the sound 
data from the sound -addition -information server 108, 
and the GUI data from the GUI data server 109, and 
then transmits the multiplexed data. 
[0039] When this broadcast is received by the AV 
system 1 03 at each home, it is possible to view the pro- 
gram of the selected channel, for example, by using the 
monitor unit 1 14. Also, as the GUI screen using the GUI 
data transmitted together with the data of the program, 
an EPG (electrical program guide) screen may be dis- 
played so that retrieval of a program or the like can be 
performed. By performing a required operation using 
the GUI screen for specific services other than the nor- 
mal program broadcast, services other than viewing of a 
normal program provided in the broadcast system can 
be enjoyed. 

[0040] For example, if the GUI screen for the down- 
loading service of audio (music piece) data is displayed 
and an operation is performed using this GUI screen, it 
is possible to download the audio data of the music 
piece requested by the user and to record and save it 
onto a disc by using the MDC recorder/player 1 . 



[0041] In this digital satellite broadcast system, 
when performing transmission from the ground station 
1 01 to the AV system 1 03 via the satellite 1 02, the DSM- 
CC (Digital Storage Media-Command and Control) pro- 
5 tocol is employed. 

[0042] The DSM-CC (MPEG-part6) system, as is 
already known, defines commands and a control 
method for retrieving an MPEG coded bit stream stored 
on a digital storage medium (DSM) or storing a stream 
w on a DSM via a certain network. 

[0043] In order to transmit contents (a set of 
objects) of a data broadcast service (e.g., the GUI 
screen) by the DSM-CC system, it is necessary to 
define the description format of the contents in advance. 
15 In this digital satellite broadcast system, the above- 
described MHEG is employed as the definition of the 
description format of the contents. 
[0044] The ground station 101 in this digital satellite 
broadcast system is constituted as shown in Fig.2. 
20 [0045] In the ground station 101 shown in Fig.2, a 
TV program material entry system 131 registers the 
material data obtained from the TV program material 
server 106 to an AV server 135. The material data is 
sent to a TV program sending system 139, whereby the 
25 video data is compressed, for example, in accordance 
with the MPEG2 system, and whereby the audio data is 
divided into packets, for example, in accordance with 
the MPEG2 audio system. The output of the TV pro- 
gram sending system 139 is sent to a multiplexer 145. 
30 [0046] In a music material entry system 132, the 
material data from the music material server 107, that 
is, the audio data, is supplied to an MPEG2 audio 
encoder 136 A and an ATRAC encoder 136B. The 
MPEG2 audio encoder 136A and the ATRAC encoder 
35 136B perform encoding processing (compression cod- 
ing) on the supplied audio data and then register the 
encoded audio data to an MPEG audio server 140A and 
an ATRAC audio server 140B, respectively. 
[0047] The MPEG audio data registered to the 
40 MPEG audio server 140A is transmitted to an MPEG 
audio sending system 143A, whereby the data is 
divided into packets and then transmitted to the multi- 
plexer 145. The ATRAC data registered to the ATRAC 
audio server MOB is sent as 4X-speed ATRAC data to 
45 an ATRAC audio sending system 143B, whereby the 
data is divided into packets and sent to the multiplexer 
145. 

[0048] In a sound-addition-information entry sys- 
tem 133, the sound addition information, which is the 

50 material data from the sound-addition-information 
server 108, is registered to a sound-addition-informa- 
tion database 137. The sound addition information reg- 
istered to the sound-addition-information database 137 
is transmitted to a sound-addition-information sending 

55 system 141, whereby the information is similarly divided 
into packets and transmitted to the multiplexer 145. 
[0049] In a material-for-GUI entry system 134, the 
GUI data, which is the material data from the GUI data 
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server 109, is registered to a GUI material database 
138. 

[0050] The GUI material data registered to the GUI 
material database 138 is transmitted to a GUI authoring 
system 142, whereby processing is performed so that 
the data is converted into a data format that can be out- 
putted as a GUI screen. 

[0051] Specifically, for example, in the case of a 
GUI screen for downloading a music piece, the data 
transmitted to the GUI authoring system 1 42 may be still 
image data of the album jacket, text data such as lyrics, 
and sound data that should be outputted in accordance 
with the operation. 

[0052] Each of the above-described data is so- 
called monomedia. In the GUI authoring system 142, 
the monomedia data is coded by using an MHEG 
authoring tool and the coded monomedia data is han- 
dled as an object. 

[0053] Then, the contents of MHEG-5 are produced 
together with a scenario description file (script) which 
defines the relation of the above-mentioned objects so 
that a display mode of the GUI screen and an output 
mode of an image and sound corresponding to the 
operation can be obtained. 

[0054] Image and sound data (MPEG video data 
and MPEG audio data) based on the material data of 
the TV program material server 106, and MPEG audio 
data based on the music material data of the music 
material server 107 are also displayed on the GUI 
screen, and an output mode corresponding to the oper- 
ation is provided. 

[0055] Therefore, as the above-mentioned scenario 
description file, the GUI authoring system 142 handles, 
as objects, the image and sound data based on the 
material data of the TV program material server 106, 
the MPEG audio data based on the music material data 
of the music material server 107, and the sound addi- 
tion Information from the sound-addition-information 
server 108, if necessary, and performs prescription by 
the script of MHEG. 

[0056] The data of the MHEG contents transmitted 
from the GUI authoring system 1 42 includes a script file, 
a data file of various types of still images as objects, and 
a text data file. The still image data is data of 640x480 
pixels compressed, for example, in accordance with the 
JPEG (Joint Photographic Experts Group) system, and 
the text data is a file of, for example, not more than 800 
characters. 

[0057] The data of the MHEG contents obtained by 
the GUI authoring system 142 is transmitted to a DSM- 
CC encoder 144. 

[0058] In the DSM-CC encoder 144, the data is 
converted into a transport stream (hereinafter also 
abbreviated as TS (transport stream)) of a format that 
can be multiplexed into a data stream of video and 
audio data in accordance with the MPEG2 format, and 
then is divided into packets, which are outputted to the 
multiplexer 145. 



[0059] In the multiplexer 145, the video packets and 
audio packets from the TV program sending system 
139, the audio packets from the MPEG audio sending 
system 143A, the 4X -speed audio packets from the 

5 ATRAC audio sending system 143B, the sound-addi- 
tion-information packets from the sound-addition-infor- 
mation sending system 141, and the GUI data packets 
from the GUI authoring system 142 are multiplexed on 
the time base and are encrypted in accordance with the 

10 key information output from the key information server 
110. 

[0060] The output of the multiplexer 1 45 is transmit- 
ted to a radio wave sending system 146, whereby 
processing such as addition of an error correcting code, 
15 modulation, and frequency conversion is performed 
thereon and then the resulting data is transmitted from 
the antenna toward the satellite 102. 
[0061] Fig.3 shows an example of data in transmit- 
ting and outputting "rt from the ground station 101 to the 
20 satellite 102. Each of the data shown in Fig.3 is multi- 
plexed on the time base in practice. Each of the data is 
constituted so that, as shown in Fig.3, the part from a 
time point t1 to a time point t2 is one event and the part 
from a time point t2 is the next event. The event referred 
25 to herein is a unit for changing the lineup of a plurality of 
music pieces and has a duration of 30 minutes or about 
one hour, if in the case of a channel of a music program. 
[0062] As shown in Fig.3, a program of normal pro- 
gram broadcast of dynamic images having predeter- 
30 mined contents A1 is broadcast in the event from the 
time point t1 to the time point t2. In the event starting at 
the time point t2, a program having contents A2 is 
broadcast. The contents of the broadcast in this normal 
program are dynamic images and sounds. 
35 [0063] As MPEG audio channels (1) to (10), for 
example, 10 channels of channels CH1 to CH10 are 
prepared. In this case, in each of the audio channels 
CH1 , CH2, CH3, .... CH10, the same music piece is 
repeatedly transmitted during the broadcast of one 
40 event. That is, in the period of the event from the time 
point t1 to the time point t2, a music piece B1 is repeat- 
edly transmitted in the audio channel CH1, a music 
piece C1 is repeatedly transmitted in the audio channel 
CH2, and similarly, a music piece K1 is repeatedly 
45 transmitted in the audio channel CH1 0. This is common 
to the 4X-speed ATRAC audio channels (1) to (10) 
shown therebelow. 

[0064] In other words, in Fig.3, the same music 
piece is broadcast in the MPEG audio channel and the 

so 4X-speed ATRAC audio channel having the same chan- 
nel number in ( ). Also, the numerals in ( ), which are the 
channel numbers of the sound addition information, are 
sound addition information added to the audio data hav- 
ing the same cannel numbers. In addition, the still 

55 image data and text data transmitted as the GUI data 
are formed for each channel. These data are time-divi- 
sion multiplexed within the MPEG2 transport packet and 
then transmitted, as shown in Figs.4A to 4D, and recon- 
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structed by using the header information of each packet 
inside the I RD 1 12, as shown in Figs.4E to 4H. 
[0065] Fig. 5 is a block diagram showing the con- 
struction of a data transmission system according to the 
present invention. 

[0066] The data transmission system constitutes 
the AV system 103 included in the above -described dig- 
ital satellite broadcast system, and has a data transmis- 
sion apparatus 10 functioning as the 1RD 112 and a 
data receiving apparatus 20 functioning as the MD 
recorder/player 1. The data transmission apparatus 10 
and the data receiving apparatus 20 are connected with 
each other via a transmission line 30. 
[0067] In this data transmission system, the data 
transmission apparatus 1 0 is a set top box, that is, the 
IRD 112, for receiving a satellite digital multi-channel 
broadcast program sent from a communication satellite, 
and is constituted by a central processing unit (CPU) 12 
connected to an internal bus 1 1 , a memory 1 3, an input 
interface 14, a user interface 15, and an input/output 20 
interface 16. A satellite antenna 1 15 is connected to the 
input interface 14. The input/output interface 16 is an 
IEEE (the Institute of Electrical and Electronics Engi- 
neers) 1394 high-performance serial bus interface 
(hereinafter simply referred to as the IEEE 1394 inter- 25 
face), which is a digital interface, and is connected to 
the transmission line 30 made of an IEEE 1 394 bus. 
[0068] In this data transmission apparatus 10, the 
CPU 12 operates in accordance with control programs 
stored in the memory 13 and performs various types of 30 
control operations such as a channel selection opera- 
tion of a program in response to the operation informa- 
tion inputted via the user interface 15. 
[0069] Then, the data transmission apparatus 10 
selects a desired channel of the satellite digital mufti- 35 
channel broadcast program signal by the input interface 
14 to which the receiving antenna 115 is connected, 
then receives the contents (music data) and meta-data 
(related data such as text data and JPEG data) of the 
desired channel, and transmits the received music data 40 
and meta-data (related data) to the transmission line 30 
from the input/output interface 16. 
[0070] The data receiving apparatus 20 is a record- 
ing/playback apparatus for recording/playing back the 
contents (music data) and meta-data (related data) as 
received by the data transmission apparatus 1 0, that is, 
the set top box, via a recording medium such as a mag- 
netic tape or a magneto-optical disc. The data receiving 
apparatus 20 is constituted by a central processing unit 
22 connected to an interface bus 21, a memory 23, an so 
input/output interface 24, a user interface 25, and a 
media access section 26. The input/output interface 24 
is an IEEE (the Institute of Electrical and Electronics 
Engineers) 1 394 high-performance serial bus interface 
(hereinafter simply referred to as the IEEE 1394 inter- 55 
face), which is a digital interface, and is connected with 
the transmission line 30 made of the IEEE 1394 bus. 
[0071] Fig.6 shows an exemplary structure of an 



IEEE 1394 bus cable which is actually used as the 
transmission line 30. 

[0072] In the case shown in Fig.6, connectors 600A 
and 600B are connected to each other via a cable 601 , 
5 and six pins of pin numbers 1 to 6 are used as pin termi- 
nals of the connectors 600A and 600B. 
[0073] For the pint terminals provided in the con- 
nectors 600A and 600B, the pin number 1 is assigned to 
a power source (VP), the pin number 2 is assigned to 
10 the ground (VG), the pin number 3 is assigned to TPB1 , 
the pin number 4 is assigned to TPB2, the pin number 5 
is assigned to TPA1 , and the pin number 6 is assigned 
to TPA2. 

[0074] The connection mode of the pins between 
the connectors 600A and 600B is as follows. 

pin number 1 (VP) - pin number 1 (VP) 
pin number 2 (VG) - pin number 2 (VG) 
pin number 3 (TPB1 ) - pin number 5 (TPA1 ) 
pin number 4 (TPB2) - pin number 6 (TPA2) 
pin number 5 (TPA1 ) - pin number 3 (TPB1 ) 
pin number 6 (TPA2) - pin number 4 (TPB2) 

Among these sets of pin connections, the following set 
of two twisted wires forms a signal line 601 A which 
mutually transmits a signal in a differential manner. 

pin number 3 (TPB1 ) - pin number 5 (TPA1 ) 
pin number 4 (TPB2) - pin number 6 (TPA2) 

Also, the following set of two twisted wires forms a sig- 
nal line 601 B which mutually transmits a signal in a dif- 
ferential manner. 

pin number 5 (TPA1 ) - pin number 3 (TPB1 ) 

pin number 6 (TPA2) - pin number 4 (TPB2) 

[0075] The signals transmitted by the two sets of 
the signal line 601 A and the signal line 601 B are a data 
signal (Data) shown in Fig.7A and a strobe signal 
(Strobe) shown in Fig.7B. 

[0076] The data signal shown in Fig.7A is outputted 
fromTPBI orTPB2 by using one of the signal line 601 A 
and the signal line 601 B and is inputted to TPA1 or 
TPA2. 

[0077] The strobe signal shown in Fig.7B is a signal 
obtained by performing predetermined logical operation 
with respect to the data signal and a transmission clock 
synchronized with the data signal, and has a frequency 
lower than that of the actual transmission clock. This 
strobe signal is outputted from TPA1 or TPA2 by using 
the other signal line that is not used for data signal 
transmission, of the signal line 601 A and the signal line 
601 B, and is inputted to TPB1 or TPB2. 
[0078] For example, if it is assumed that the data 
signal and the strobe signal shown in Figs.7A and 7B 
are inputted to a particular IEEE 1394-compatible 
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equipment this equipment performs predetermined log- 
ical operation on the inputted data signal and strobe sig- 
nal, thus generates a transmission clock (Clock) as 
shown in Fig.7C, and uses it for required input data sig- 
nal processing. 

[0079] In accordance with the IEEE 1394 standard, 
by adopting such a hardware- related data transmission 
mode, the need to transmit a transmission clock of a fast 
cycle between equipments by means of a cable is elim- 
inated and the reliability of signal transmission is 
improved. 

[0080] Although the specification of six pins is 
employed in the above description, there is also the 
specification of four pins in accordance with the IEEE 
1394 format, consisting of only the signal line 601 A and 
the signal line 601 B , which are two sets of twisted 
wires, with the power source (VP) and the ground (VG) 
omitted. For example, the MD recorder/player 1 in this 
AV system 103 is actually configured in consideration 
that a simpler system can be provided for the user by 
using a cable of the four-pin specification. 
[0081] In accordance with the IEEE 1 394 standard, 
a transmission operation performed within the network 
connected via the IEEE 1394 bus is called a subaction, 
and the following two types of subactions are defined. 
That is, as the two subactions, an asynchronous trans- 
mission mode called "asynchronous data transfer" for 
carrying out normal data transmission, and a synchro- 
nous transmission mode called "isochronous data 
transfer" in which a transmission band is ensured, are 
defined. 

[0082] Specifically, in accordance with the IEEE 
1394 standard, transmission is carried out by repeating 
the isochronous cycle (nominal cycle) as shown in 
Fig.8. In this case, one isochronous cycle is set as 125 
u,sec, which corresponds to 100 MHZ as a band. It is 
prescribed that the isochronous cycle may be other than 
125 usee. For each isochronous cycle, the data is 
divided into packets and then transmitted. 
[0083] A cycle start packet indicating the start of 
one isochronous cycle is located at the leading part of 
this isochronous cycle. 

[0084] The generation timing of this cycle start 
packet is indicated by one specific apparatus inside the 
IEEE 1394 network system defined as a cycle master. 
[0085] Following the cycle start packet, an iso- 
chronous packet is preferentially located. As shown in 
Fig.8, the isochronous packet is divided into packets for 
each channel, and these are arranged and transferred 
in a time-division manner (isochronous subactions). A 
pause period (for example, 0.05 usee) called an iso- 
chronous gap is provided for the delimitation for each 
packet inside the isochronous subactions. 
[0086] In the manner as described above, in the 
IEEE 1394 system, it is possible to transmit and receive 
isochronous data on multiple channels by one transmis- 
sion line. 

[0087] For example, in the case of transmission of 



ATRAC data (compressed audio data) with which the 
MD recorder/player 1 in this AV system is compatible by 
an isochronous method, on the assumption that the 
ATRAC data has a 1X-speed transfer rate of 1.4 Mbps, 
5 time-series-like continuity (real-time property) is 
secured If ATRAC data of at least around 20 and several 
M bytes is transmitted as isochronous packets for each 
isochronous cycle. 

[0088] For example, when a particular equipment 
w transmits ATRAC data, a request for a size of the iso- 
chronous packet that Is sufficient to secure real-time 
transmission of the ATRAC data is made to an IRM (iso- 
chronous resource manager) inside the IEEE 1394 net- 
work system. In the IRM, the current data transmission 
75 status is monitored and permission/non-permission is 
given. If permission is given, it is possible to divide the 
ATRAC data into isochronous packets and transmit 
them by the designated channel. This is what is called 
band reservation in the IEEE 1394 interface. 
20 [0089] By using the remaining band which is not 
used by the isochronous subactions in the band of the 
isochronous cycle, transmission of asynchronous sub- 
actions, that is, asynchronous packets, is performed. 
[0090] Fig. 8 shows an example in which two asyn- 
25 chronous packets of packet A and packet B are trans- 
mitted. Following the asynchronous packet, a signal 
called ACK (acknowledge) is appended with a pause 
period of an ack gap (0.05 usee) provided between 
them. ACK is a signal outputted from the receiving side 
30 (Target) in a hardware-like manner in order to inform the 
transmission side (Controller) that a certain kind of 
asynchronous data has been received in the process of 
asynchronous transaction. 

[0091] A pause period called a subaction gap of 
35 approximately 10 usee is provided before and after the 
data transmission unit made up of an asynchronous 
packet and ACK following this packet. 
[0092] If ATRAC data is transmitted by isochronous 
packets, and an AUX data file which is appended to the 
40 ATRAC data is transmitted by asynchronous packets, it 
is seemingly possible to simultaneously transmit the 
ATRAC data and te AUX data file. 
[0093] Asynchronous transmission is one-to-one 
unicast transmission and has a property such that inter- 
ns ception thereof is difficult in comparison with iso- 
chronous transmission for performing broadcast 
transmission. 

[0094] In this data transmission system, music data 
is transmitted by using isochronous transmission in 
so which a transmission band can be secured, and related 
information is transmitted by using asynchronous trans- 
mission. 

[0095] The data receiving apparatus 20 receives 
music data and related information via the input/output 
55 interface 24. If the music data and related information 
are recordable, these are recorded on a recording 
medium such as a magnetic tape or a magneto-optical 
disc as described above by the media access section 
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26. 

[0096] The music data and the related information 
recorded on the recording medium are reproduced by 
the media access section 26. The music data is con- 
verted into an analog signal and is outputted from an 
analog audio output terminal 26A. The related informa- 
tion is outputted from a video output terminal 26B. Also, 
the music data and the related information reproduced 
by the media access section 26 may be transmitted to 
another equipment via the IEEE 1 394 interface. 
[0097] When the data receiving apparatus 20 
receives music data the recording of which is prohibited, 
the data receiving apparatus 20 simply converts the 
music data into an analog signal without recording the 
music data on a recording medium by media access 
section 26, and outputs the signal from the analog audio 
output terminal 26A. 

[0098] In this data receiving apparatus 20, the CPU 
22 operates in accordance with control programs stored 
in the memory 23 so that various types of control oper- 
ations such as a recording operation by the media 
access section 26 are performed in accordance with 
operation information which is inputted via the user 
interface 25. 

[0099] In this data transmission system, the con- 
tents (music data) and meta-data (related data, that is, 
text data, JPEG data and the like) of a desired channel 
received by the data transmission apparatus 1 0 via the 
receiving antenna 115 are encrypted by different 
encryption methods and encryption keys, and are trans- 
mitted to the data receiving apparatus 20. 
[0100] Specifically, as shown in Fig.9, which shows 
the construction of an essential portion of the data 
transmission 10, the input interface 14 of the data trans- 
mission apparatus 10 has a demultiplexer (DEMUX) 
14A for selecting a desired channel of a satellite digital 
multi-channel broadcast signal, and a decoder (DEC) 
14B for decoding a transport stream of a desired chan- 
nel selected by the demultiplexer (DEMUX) 14A. The 
input/output interface 1 6 has a data separation circuit 
16A for separating the contents (music data) and meta- 
data (related data such as text data and JPEG data) 
contained in the transport stream of a desired channel 
decoded by the decoder (DEC) 14B, a first encoder 1 6B 
for encrypting the contents (music data) separated by 
the data separation circuit 1 6 A using an encryption key 
Kiso by a first encryption method and thus creating iso- 
chronous packets, and a second encoder 16C for 
encrypting the meta-data (related data) separated by 
the data separation circuit 1 6A using an encryption key 
Kasync by a second encryption method and thus creat- 
ing asynchronous packets. 

[0101] The input/output interface 16 in the data 
transmission apparatus 10 is controlled by the CPU 12 
and operates as shown in the flowchart of Fig. 10. That 
is, when a transport stream of a desired channel 
received via the input interface 14 is inputted (step S1), 
the input/output interface 16 determines whether the 



data contained in the inputted transport stream is the 
contents (music data) or meta-data (related data) (step 
S2). When the data is the contents (music data), the 
contents (music data) are encrypted using an encryp- 
s tion key Kiso by a first encryption method (step S3), and 
a process for transmitting the contents (music data) 
encrypted by the first encryption method as iso- 
chronous packets is performed (step S4). When the 
data contained in the inputted transport stream is the 
w meta-data (related data), the meta-data (related data) is 
encrypted using an encryption key Kasync by a second 
encryption method (step S5), and a process for trans- 
mitting the meta-data (related data) encrypted by the 
second encryption method as asynchronous packets is 
15 performed (step S6). 

[0102] In this data transmission system, prior to the 
data transmission, a protocol for performing mutual 
authentication and for sharing two types of encryption 
keys for isochronous and asynchronous transmission is 

20 performed between the data transmission apparatus 1 0 
and the data receiving apparatus 20. Specifically, after 
the authentication and key sharing protocol as shown in 
the flowchart of Fig. 1 1 is performed, data is transmis- 
sion is carried out. The processing procedure on the 

25 data transmission apparatus 1 0 side in this data trans- 
mission system is shown in the flowchart of Fig. 12, and 
the processing procedure on the data receiving appara- 
tus 20 side is shown in the flowchart of Fig. 13. 
[0103] In Fig.1 1 showing the authentication and key 

30 sharing protocol, the data transmission apparatus 10 is 
shown as a source device A, and the data receiving 
apparatus 20 is shown as a sink device B. These appa- 
ratuses are given information Kv indicating the validity 
of themselves at the time of manufacture, and hold this 

35 information in secret. 

[0104] In this data transmission system, the CPU 
1 2 of the data transmission apparatus 1 0, that is, the set 
top box, first transmits a start command for starting the 
transmission of data from the input/output interface 16 

40 to the data receiving apparatus 20 via the transmission 
line 30 (step S1 0). 

[0105] After the CPU 22 of the data receiving appa- 
ratus 20, that is, the recording apparatus, receives the 
start command (START command) sent from the data 

45 transmission apparatus 1 0 via the transmission line 30 
connected to the input/output interface 24 (step S20), 
the CPU 22 generates a request for starting the authen- 
tication and key sharing protocol (Request authentica- 
tion) and two random numbers Bn1 and Bn2 of m (e.g., 

so m = 64) bits and transmits them to the data transmission 
apparatus 10 via the input/output interface 24 (step 
S21). 

[0106] After the CPU 12 of the data transmission 
apparatus 10 receives the request for starting the 
55 authentication and key sharing protocol (Request 
authentication) and the two random numbers Bn1 and 
Bn2 sent from the data receiving apparatus 20 via the 
transmission line 30 connected to the input/output inter- 
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face 16 (step S11). the CPU 12 generates two random 
numbers An1 and An2 of m bits and sends them to the 
data transmission apparatus 10 via the input/output 
interface 16 (step S 12). 

[01071 The data receiving apparatus 20 receives 5 
the two random number An1 and An2 sent from the data 
transmission apparatus 10 (step S22). 
[0108] Then, the CPU 12 of the data transmission 
apparatus 10 generates concatenated data (KvflAn2| 
Bn2) formed by concatenating the Information Kv indi- w 
eating the validity of the apparatus itself, the random 
number An2 sent to the data receiving apparatus 20 at 
step S12 and the random number Bn2 received at step 
S1 1 , and inputs this concatenated data (KvQAn2flBn2) to 
a hash function Hash[ ]. 15 

R2 = Hash[Kv||An2|]Bn2] msb_m 

The CPU 12 then sets the most significant m bits of the 
output thereof as response data R2 and sends this 20 
response data R2 to the data receiving apparatus 20 via 
the input/output interface 16 (step S13). Figs.11 and 12 
show an example in m = 64 bits is used. In this case, X| 
Y indicates bit coupling of X and Y. Although the most 
significant m bits which provide the response data R2 25 
are of the same number of bits as the number of bits m 
of the random number, the number of bits may be differ- 
ent. 

[0109] The CPU 22 of the data receiving apparatus 
20 receives the response data R2 sent from the data 30 
transmission apparatus 10 (step S23). The CPU 22 
then generates concatenated data (KvflAM||Bn1) 
formed by concatenating the information Kv indicating 
the validity of the apparatus itself, the random number 
An1 received at step S22 and the random number Bn1 35 
sent to the data transmission apparatus 1 0 at step S21 , 
and inputs this concatenated data (KvflAnlflBnl) to a 
hash function Hash[ ]. 

R1 = Hash[KvflAn1 flBnl ] msb_m 40 

The CPU 22 then sets the most significant m bits of the 
output thereof as response data R1 and sends this 
response data R1 to the data transmission apparatus 
1 0 via the input/output interface 24 (step S24). Figs.1 1 45 
and 13 show an example in m = 64 bits is used. 
Although the most significant m bits which provide the 
response data R1 are of the same number of bits as the 
number of bits m of the random number, the number of 
bits may be different. 50 
[0110] The CPU 12 of the data transmission appa- 
ratus 10 receives the response data R1 sent from the 
data receiving apparatus 20 (step S14). 
[0111] Moreover, the CPU 12 of the data transmis- 
sion apparatus 10 generates concatenated data (Kv| 55 
An1flBn1) formed by concatenating the information Kv 
indicating the validity of the apparatus itself, the random 
number An1 sent to the data receiving apparatus 20 at 



step S12 and the random number Bn1 received at step 
S1 1 , and inputs this concatenated data (KvflAnl flBnl ) to 
a hash function Hash[ ]. 

R'1 = Hash[KvQAn10Bn1] msb_m 

The CPU 12 then sets the most significant m bits of the 
output thereof as reference data R'1 (step S15). That is, 
the same m bits as the response data R1 are caused to 
be the reference data R'1 . 

[0112] Then, the CPU 12 of the data transmission 
apparatus 10 compares the reference data R'1 with the 
response data R1 received at step S14 (step S16). If the 
response data R1 does not match the reference data 
R'1 at this step S16, the CPU 12 of the data transmis- 
sion apparatus 10 determines that the data receiving 
apparatus 20 is an unauthorized apparatus, and termi- 
nates the authentication and key sharing protocol. 
[0113] When the response data R1 matches the 
reference data R*1 at step S16, the CPU 12 of the data 
transmission apparatus 10 determines that the data 
receiving apparatus 20 is an authorized apparatus, and 
inputs the concatenated data (KvQAn1|Bn1) formed by 
concatenating the information Kv indicating the validity 
of the apparatus itself, the random number An1 sent to 
the data receiving apparatus 20 at step S12 and the 
random number Bn1 received at step 1 1 to a hash func- 
tion HashD. 

Kiso = Hash[Kv]|An1 QBn1] lsb_m 

The CPU 12 then sets the least significant m bits of the 
output thereof as an encryption key Kiso to be used to 
encrypt the data to be transmitted by isochronous trans- 
mission. The CPU 12 of the data transmission appara- 
tus 10 also inputs the concatenated data (KvjAn2j|Bn2) 
formed by concatenating the information Kv indicating 
the validity of the apparatus itself, the random number 
An2 sent to the data receiving apparatus 20 at step S1 2 
and the random number Bn2 received at step 1 1 to a 
hash function HashQ. 

Kasync= Hash[KvflAn2flBn2] lsb_m 

The CPU 12 then sets the least significant m bits of the 
output thereof as an encryption key Kasync to be used 
to encrypt the data to be transmitted by asynchronous 
transmission (step S17). 

[0114] Although the least significant m bits which 
provide the two types of encryption keys Kiso and 
Kasync are of the same number of bits as the number of 
bits m of the random number, the number of bits may be 
different. 

[0115] Meanwhile, the CPU 22 of the data receiving 
; apparatus 20 generates concatenated data (KvflAn2o 
Bn2) formed by concatenating the information Kv indi- 
cating the validity of the apparatus itself, the random 
number An2 received at step S22 and the random 
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number Bn2 sent to the data transmission apparatus 1 0 
at step S21 , and inputs this concatenated data (Kv||An2|| 
Bn2) to a hash function Hash[ ]. 

R'2 = Hash[KvflAn2|]Bn2] msb_m s 

The CPU 22 then sets the most significant m bits of the 
output thereof as reference data R'2 (step S25). That is, 
the same m bits as the response data R2 are caused to 
be the reference data R'2. io 
[0116] Then, the CPU 22 of the data receiving 
apparatus 20 compares the reference data R'2 with the 
response data R2 received at step S23 {step S26). If the 
response data R2 does not match the reference data 
R'2 at this step S26, the CPU 22 of the data receiving 15 
apparatus 20 determines that the data transmission 
apparatus 10 is an unauthorized apparatus, and termi- 
nates the authentication and key sharing protocol. 
[0117] When the response data R2 matches the 
reference data R*2 at step S26, the CPU 22 of the data 20 
receiving apparatus 20 determines that the data trans- 
mission apparatus 10 is an authorized apparatus, and 
inputs the concatenated data (KvflAn1|]Bn1) formed by 
concatenating the information Kv indicating the validity 
of the apparatus itself, the random number An1 25 
received at step S22 and the random number Bn1 sent 
to the data transmission apparatus 10 at step aS21 to a 
hash function Hash[ ). 

K'iso = Hash[Kv|]An1 ||Bn1] lsb_m 30 

The CPU 22 then sets the least significant m bits of the 
output thereof as an encryption key K'iso to be used to 
decode the data transmitted by isochronous transmis- 
sion. That is, the same m bits as the encryption key Kiso 35 
are caused to be the encryption key K'iso. 
[0118] The CPU 22 also inputs the concatenated 
data (Kv||An2flBn2) formed by concatenating the infor- 
mation Kv indicating the validity of the apparatus itself, 
the random number An2 received at step S22 and the 40 
random number Bn2 sent to the data transmission 
apparatus 10 at step S21 to a hash function Hash[ ]. 

K'async = Hash[KvflAn2||Bn2] lsb_m 

45 

The CPU 22 then sets the least significant m bits of the 
output thereof as an encryption key K'async to be used 
to decode the data transmitted by asynchronous trans- 
mission (step S27). That is, the same m bits as the 
encryption key Kasync are caused to be the encryption so 
key K'async. 

[0119] In this data transmission system, prior to 
data transmission, the authentication and key sharing 
protocol is performed by asynchronous transmission of 
IEEE 1394 between the data transmission apparatus 10 55 
and the data receiving apparatus 20. Thus, the data 
transmission apparatus 1 0 and the data receiving appa- 
ratus 20 can authenticate the validity of each other and 



can share the encryption key for transmitting encrypted 
data by isochronous transmission and the encryption 
key for transmitting encrypted data by asynchronous 
transmission. 

[0120] Also, in this data transmission system, after 
the authentication and key sharing protocol is executed, 
the music data from the data transmission apparatus 10 
is encrypted using the encryption key Kiso and transmit- 
ted by isochronous transmission, and the related data is 
encrypted using the encryption key Kasync and trans- 
mitted by asynchronous transmission (step Si 8). The 
data receiving apparatus 20 decodes the music data 
transmitted by isochronous transmission, using the 
encryption key K'iso, and decodes the related data 
transmitted by asynchronous transmission, using the 
encryption key K'async (step S28). 
[01 21 ] That is, after the execution of the authentica- 
tion and key sharing protocol, the data receiving appa- 
ratus 20 decodes the music data sent by isochronous 
transmission from the data transmission apparatus 1 0, 
by using the encryption key K'iso, and decodes the 
related data sent by asynchronous transmission, by 
using the encryption key K'async, so that the respective 
plain text data can be obtained. [Another Example of 
Authentication and Key Sharing Protocol] 
[0122] Another example of the authentication and 
key sharing protocol to be executed prior to the data 
transmission in this data transmission system is shown 
in the flowchart of Fig. 14. The processing procedure on 
the data transmission apparatus 1 0 side in this case is 
shown in the flowchart of Fig. 15, and the processing 
procedure on the data receiving apparatus 20 side is 
shown in the flowchart of Fig. 16. 
[0123] in Fig. 14 showing the authentication and 
key sharing protocol, the data transmission apparatus 
10 is shown as a source device A, and the data receiv- 
ing apparatus 20 is shown as a sink device B. These 
apparatuses are given information Kv indicating the 
validity of themselves at the time of manufacture, and 
hold this information in secret. 

[0124] In this data transmission system, the CPU 
1 2 of the data transmission apparatus 1 0, that is, the set 
top box, first transmits a start command for starting the 
transmission of data from the input/output interface 16 
to the data receiving apparatus 20 via the transmission 
line 30 (step S110). 

[0125] After the CPU 22 of the data receiving appa- 
ratus 20, that is, the recording apparatus, receives the 
start command (START command) sent from the data 
transmission apparatus 10 via the transmission line 30 
connected to the input/output interface 24 (step S120), 
the CPU 22 generates a request for starting the authen- 
tication and key sharing protocol (Request authentica- 
tion) and two random numbers Bn1 and Bn2 of m (e.g., 
m = 64) bits and transmits them to the data transmission 
apparatus 10 via the input/output interface 24 (step 
S121). 

[0126] After the CPU 12 of the data transmission 
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apparatus 10 receives the request for starting the 
authentication and key sharing protocol (Request 
authentication) and the two random numbers Bn1 and 
Bn2 sent from the data receiving apparatus 20 via the 
transmission line 30 connected to the input/output inter- 
face 16 (step S1 1 1), the CPU 12 generates two random 
numbers An1 and An2 of m bits and sends them to the 
data transmission apparatus 10 via the input/output 
interface 1 6 (step S1 12). 

[0127] The data receiving apparatus 20 receives 
the two random number An 1 and An2 sent from the data 
transmission apparatus 10 (step S122). 
[0128] Then, the CPU 12 of the data transmission 
apparatus 10 generates concatenated data (Kv||An1| 
Bn1) formed by concatenating the information Kv indi- 
cating the validity of the apparatus itself, the random 
number An1 sent to the data receiving apparatus 20 at 
step S1 12 and the random number Bn1 received at step 
S111, and inputs this concatenated data (Kv||An1|Bn1) 
to a hash function Hash[ ], 

R'1 = Hash[KvoAn1|Bn1] msb_p 

Kiso = Hash[KvoAn1flBn1] lsb_n 

The CPU 12 then sets the most significant p bits of the 
output thereof as reference data R'1 and sets the least 
significant n (e.g., n = 64) bits as an encryption key Kiso 
used for encrypting the data to be transmitted by iso- 
chronous transmission (step S113). In this case, XflY 
indicates bit coupling of X and Y. 
[0129] Then, the CPU 12 of the data transmission 
apparatus 10 generates concatenated data (KisoQAn2| 
Bn2) formed by concatenating the encryption key Kiso 
thus calculated, the random number An2 sent to the 
data receiving apparatus 20 at step S1 12 and the ran- 
dom number Bn2 received at step S1 1 1 , and inputs this 
concatenated data (KisoflAn2QBn2) to a hash function 
Hash[ ]. 

R2 = Hash[KisoDAn2|]Bn2] msb_p 

The CPU 1 2 sets the most significant p bits of the output 
thereof as response data R2 (step S114). 
[0130] Then, the CPU 12 of the data transmission 
apparatus 10 sends the response data R2 calculated at 
step S114 to the data receiving apparatus 20 via the 
input/output interface 16 (step S115). 
[0131] On the other hand, the CPU 22 of the data 
receiving apparatus 20 generates concatenated data 
(KvflAniiBnl) formed by concatenating the information 
Kv indicating the validity of the apparatus itself, the ran- 
dom number An1 received at step S122 and the random 
number Bn1 sent to the data transmission apparatus 10 
at step S121, and inputs this concatenated data (Kv| 
AnigBnl) to a hash function Hash[ ]. 

R1 = Hash[Kv|]An1|Bn1] msb_p 



Kiso = Hash[Kv|]An1[]Bn1] lsb_n 

The CPU 22 then sets the most significant p bits of the 
output thereof as response data R1 and sets the least 
5 significant n bits as an encryption key Kiso used for 
decoding the data transmitted by isochronous transmis- 
sion (step S123). 

[0132] Then, the CPU 22 of the data receiving 
apparatus 20 generates concatenated data (K , isoQAn2Q 
w Bn2) formed by concatenating the encryption key K'iso 
thus calculated, the random number An2 received at 
step S122 and the random number Bn2 transmitted to 
the data receiving apparatus 10 step S121, and inputs 
this concatenated data (Kiso|An2DBn2) to a hash time- 
rs tion Hash[ J. 

R'2 = Hash[K , isoflAn2||Bn2] msb_p 

The CPU 22 sets the most significant p bits of the output 

20 thereof as reference data R'2 (step S1 24). 

[0133] Then, the CPU 22 of the data receiving 
apparatus 20 receives the response data R2 sent from 
the data transmission apparatus 10 (step S125) and 
compares the response data R2 with the reference data 

25 R'2 calculated at step S124 (step S126). If the response 
data R2 does not match the reference data R'2 at this 
step S126, the CPU 22 of the data receiving apparatus 
20 determines that the data transmission apparatus 1 0 
is an unauthorized apparatus, and terminates the 

30 authentication and key sharing protocol. 

[0134] When the response data R2 matches the 
reference data R'2 at step S1 26, the CPU 22 of the data 
receiving apparatus 20 sends the response data R1 cal- 
culated at step S1 23 to the data transmission apparatus 

35 10 via the input/output interface 1 6 (step S127). 

[0135] The CPU 12 of the data transmission appa- 
ratus 10 receives the response data Rl sent from the 
data receiving apparatus 20 (step S1 1 6) and compares 
the response data R1 with the reference data R'1 calcu- 

40 lated at step S1 13 (step S1 17). If the response data R1 
does not match the reference data R'1 at step S1 1 7, the 
CPU 12 of the data transmission apparatus 20 deter- 
mines that the data receiving apparatus 20 is an unau- 
thorized apparatus, and terminates the authentication 

45 and key sharing protocol. 

[0136] When the response data R1 matches the 
reference data R'1 at step S1 1 7, the CPU 1 2 of the data 
transmission apparatus 10 determines that the data 
receiving apparatus 20 is an authorized apparatus. The 

so CPU 12 then generates concatenated data (KisoDAn2g 
Bn2) formed by the encryption key Kiso calculated at 
step S113, the random number An2 sent to the data 
receiving apparatus 20 at step S112 and the random 
number Bn2 received at step S1 1 1 , and inputs the con- 

55 catenated data (Kiso|jAn2aBn2) to a hash function Hash[ 
]• 

Kasync = Hash[Kiso||An2DBn2] lsb_q 
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The CPU 12 then sets the least significant q (e.g., q = 
64) bits of the output thereof as an encryption key 
Kasync to be used to encrypt the data to be transmitted 
by asynchronous transmission (step S1 18). 
[0137] The CPU 22 of the data receiving apparatus s 
20 generates concatenated data (Kiso(|An2gBn2) 
formed by the encryption key K'iso calculated at step 
S123, the random number An2 received at step S122 
and the random number Bn2 sent to the data transmis- 
sion apparatus 1 0 at step Si 21 , and inputs the concate- w 
nated data (K'iso||An2||Bn2) to a hash function Hash[ ]. 

K' async = Hash[K'iso||An2flBn2] lsb_q 

The CPU 22 then sets the least significant q bits of the 15 
output thereof as an encryption key K'async to be used 
to decode the data transmitted by asynchronous trans- 
mission (step S128). 

[0138] In this data transmission system, prior to 
data transmission, the authentication and key sharing 20 
protocol is performed by asynchronous transmission of 
IEEE 1394 between the data transmission apparatus 1 0 
and the data receiving apparatus 20. Thus, the data 
transmission apparatus 1 0 and the data receiving appa- 
ratus 20 can authenticate the validity of each other and 25 
can share the encryption key for transmitting encrypted 
data by isochronous transmission and the encryption 
key for transmitting encrypted data by asynchronous 
transmission. 

[0139] That is, after the authentication and key 30 
sharing protocol is executed, the music data from the 
data transmission apparatus 1 0 is encrypted using the 
encryption key Kiso and transmitted by isochronous 
transmission, and the related data is encrypted using 
the encryption key Kasync and transmitted by asyn- 35 
chronous transmission (step S1 19). The data receiving 
apparatus 20 decodes the music data transmitted by 
isochronous transmission, using the encryption key 
K'iso, and decodes the related data transmitted by 
asynchronous transmission, using the encryption key 40 
K'async (step S129). Thus, the respective plain text 
data can be obtained. 

[0140] In general, since isochronous transmission 
and asynchronous transmission have different charac- 
teristics, encryption algorithms and modes suitable 45 
therefor are used. Accordingly, when the encryption 
algorithm used for asynchronous transmission is 
weaker in terms of strength than that used for iso- 
chronous transmission, the encryption key Kasync used 
for asynchronous transmission is revealed relatively so 
easily in comparison with the encryption key Kiso used 
for isochronous transmission. In the authentication and 
key sharing protocol shown in Fig. 11, the encryption 
key Kasync and the encryption key Kiso are directly 
generated from the information Kv indicating the validity 55 
of the apparatus itself, which is held by each apparatus 
in secret. Therefore, if the encryption key Kasync is 
revealed, the information Kv is revealed by, for example, 



a round-robin attack. 

[0141] In contrast, in the authentication and key 
sharing protocol shown in Fig. 14, the encryption key 
Kiso is generated from the information Kv indicating the 
validity of the apparatus itself, which is held by each 
apparatus in secret, and the encryption key Kasync is 
generated from the encryption key Kiso. Therefore, 
even if the encryption key Kasync is revealed, the 
attacker cannot obtain the information Kv by attacking 
the unidirectional function Hash only once. The attacker 
must find the encryption key Kiso by a round-robin 
attack and then carry out a round-robin attack on the 
information Kv. 

[01 42] That is, in the authentication and key sharing 
protocol shown in Fig. 14, in comparison with the 
authentication and key sharing protocol shown in 
Rg.1 1, the information Kv indicating the validity of the 
apparatus itself held by each apparatus in secret is hard 
to reveal, and the data requiring the assurance of a 
transmission band and related data relating to this data 
can be transmitted safely and reliably. 
[0143] In accordance with the authentication and 
key sharing protocol shown in Fig. 14, in the above- 
described data transmission system, the encryption key 
Kasync used for asynchronous transmission is gener- 
ated on the basis of the encryption key Kiso used for 
isochronous transmission. However, the encryption key 
Kasync used for asynchronous transmission may be 
generated from the information Kv, the random number 
An1 and the random number Bn1, and the encryption 
key Kiso used for isochronous transmission may be 
generated from the encryption key Kasync, the random 
number An2 and the random number Bn2. 
[0144] Also, in accordance with the authentication 
and key sharing protocol shown in Fig. 14, the data gen- 
erated from the encryption key Kiso at the data trans- 
mission apparatus 10 is transmitted as the response 
data R2 to the data receiving apparatus 20, and the 
data generated from the information Kv at the data 
receiving apparatus 20 is transmitted as the response 
data R1 to the data transmission apparatus 10. How- 
ever, the data generated from the information Kv by the 
data transmission apparatus 1 0 may be transmitted as 
the response data R2 to the data receiving apparatus 
20, and the data generated from the encryption key Kiso 
by the data receiving apparatus 20 may be transmitted 
as the response data R1 to the data transmission appa- 
ratus 1 0. 

[0145] In the above-described data transmission 
system, by performing each authentication and key 
sharing protocol, transmission data is encrypted and 
decoded using the encryption keys Kiso and Kiso and 
the encryption keys Kasync and K'async, shared 
between the data transmission apparatus 10 and the 
data receiving apparatus 20. However, it is possible to 
separately prepare encryption keys (contents key) for 
encrypting and decoding the actually transmitted data 
and to share the contents keys between the data trans- 
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mission apparatus 10 and the data receiving apparatus 
20 by using the encryption keys Kiso and K'iso and the 
encryption keys Kasync and K'async. 
[0146] As is described above, in the present 
embodiment, via an interface haying a first transmission 5 
mode in which a transmission band is ensured and a 
second transmission mode in which a transmission 
band is not ensured, data requiring the assurance of a 
transmission band is transmitted in the first transmis- 2. 
sion mode and related data relating to the data is trans- io 
mitted in the second transmission mode. Thus, the data 
can be transmitted reliably by employing the two types 
of transmission modes, that is, transmission mode in 
which a transmission band is secured and the transmis- 
sion mode in which a transmission band is not secured, is 
[0147] Also, the data requiring the assurance of a 3. 
transmission band is encrypted by a first encryption key 
and then transmitted in the first transmission mode, and 
the related data relating to the data is encrypted by a 
second encryption key and then transmitted in the sec- 20 
ond transmission mode. Thus, the data requiring the 
assurance of a transmission band and the related data 4. 
relating to the data can be transmitted safely. 
[0148] Moreover, prior to data transmission, by exe- 
cuting a protocol for mutual authentication and sharing 25 
of a plurality of encryption keys between the data trans- 
mission apparatus and the data receiving apparatus, 
the data transmission apparatus and the data receiving 
apparatus can authenticate the validity of each other 
and share the encryption keys. Thus, the data requiring 30 
the assurance of a transmission band and the related 
data relating to the data can be transmitted safely and 
reliably- 5 - 

Claims 35 

1 . An information processing system comprising: 

a first informaflon processing apparatus com- 
prising an interface having a first transmission 40 
mode in which a transmission band is ensured 6. 
and a second transmission mode in which a 
transmission band is not ensured, and trans- 
mission control means for encrypting data 
requiring the assurance of the transmission 45 
band by a first encryption key and then trans- 
mitting the data in the first transmission mode 
via the interface and for encrypting related data 
relating to the data by a second encryption key 
and then transmitting the related data in the so 
second transmission mode via the interface; 
and 

a second information processing apparatus 
comprising an interface having a first transmis- 55 
sion mode in which a transmission band is 
ensured and a second transmission mode in 
which a transmission band is not ensured, and 



receiving control means for decoding, by the 
first encryption key, the data requiring the 
assurance of the transmission band which is 
received in the first transmission mode via the 
interface and for decoding, by the second 
encryption key, the related data received in the 
second transmission mode via the interface. 

The information processing system as claimed in 
claim 1 , wherein prior to data transmission, a proto- 
col for performing mutual authentication and shar- 
ing a plurality of encryption keys between the first 
information processing apparatus and the second 
information processing apparatus is executed. 

The information processing system as claimed in 
claim 1, wherein music data is transmitted in the 
first transmission mode and related data relating to 
the music data is transmitted in the second trans- 
mission mode. 

The information processing system as claimed in 
claim 1, wherein the first information processing 
apparatus and the second information processing 
apparatus are connected with each other via an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 
ard, for transmitting data requiring the assurance of 
a transmission band in an isochronous transmis- 
sion mode and for transmitting related data relating 
to the data in an asynchronous transmission mode. 

The information processing system as claimed in 
claim 4, wherein prior to data transmission, a proto- 
col for performing mutual authentication and shar- 
ing a plurality of encryption keys between the first 
information processing apparatus and the second 
information processing apparatus is executed in an 
asynchronous transmission mode. 

The information processing system as claimed in 
claim 1, wherein the second information processing 
apparatus generates two random numbers and 
transmits them to the first information processing 
apparatus, 

the first information processing apparatus gen- 
erates two random numbers and transmits 
them to the second information processing 
apparatus, 

the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for 
encrypting the data to be transmitted in the 
second transmission mode on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number and 
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the received random number, and 
the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 
mode and an encryption key used for decoding s 
the data transmitted in the second transmission 
mode on the basis of information indicating the 
validity of the apparatus itself, the generated 
random number and the received random 
number. io 

7. The information processing system as claimed in 
claim 6, wherein the first information processing 
apparatus transmits data P generated on the basis 

of the information indicating the validity of the appa- is 
ratus itself, the generated random number and the 
received random number, to the second information 
processing apparatus, 

the second information processing apparatus 20 
transmits data Q generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number and 
the received random number, to the first infor- 
mation processing apparatus, 25 
the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for 
encrypting the data to be transmitted in the 30 
second transmission mode in the case where 
data Q' generated on the basis of the informa- 
tion indicating the validity of the apparatus 
itself, the generated random number and the 
received random number is coincident with the 35 
received data Q, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 
mode and an encryption key used for decoding 40 
the data transmitted in the second transmission 
mode in the case where data P* generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the generated ran- 
dom number and the received random number as 
is coincident with the received data R 

8. The information processing system as claimed in 
claim 7, wherein the second information processing 
apparatus generates two random numbers R1 and so 
R2 and transmits them to the first information 
processing apparatus, 

the first information processing apparatus gen- 
erates two random numbers S1 and S2 and 55 
transmits them to the second information 
processing apparatus, 



the first information processing apparatus 
transmits data P generated on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number S2 
and the received random number R2, to the 
second information processing apparatus, 

the second information processing apparatus 
transmits data Q generated on the basis of 
information indicating the validity of the appara- 
tus itself, the received random number S1 and 
the generated random number R1 , to the first 
information processing apparatus, 

the first information processing apparatus gen- 
erates an encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and an encryption key K2 
used for encrypting the data to be transmitted 
in the second transmission mode in the case 
where data Q' generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number S1 
and the received random number R1 is coinci- 
dent with the received data Q, and 

the second information processing apparatus 
generates an encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and an encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P* 
generated on the basis of the information indi- 
cating the validity of the apparatus itself, the 
received random number S2 and the generated 
random number R2 is coincident with the 
received data R 

9. The information processing system as claimed in 
claim 8, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the validity of the apparatus itself, 
the generated random number S1 and the received 
random number R1 , and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, and 

the second information processing apparatus 
generates the encryption key K*1 used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis of the result of cal- 
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culation of a unidirectional function using the 
information indicating the validity of the appara- 
tus itself, the received random number S1 and 
the generated random number R1, and gener- 
ates the encryption key K'2 used for decoding 
the data transmitted in the second transmission 
mode, on the basis of the result of calculation 
of a unidirectional function using the informa- 
tion indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2. 

10. The information processing system as claimed in 
claim 9, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, to the sec- 
ond information processing apparatus, 

the second information processing apparatus 
transmits data Q generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, the received random 
number S1 and the generated random number 
R1, to the second information processing 
apparatus, 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 
in the second transmission mode in the case 
where data Q' generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, the generated random 
number S1 and the received random number 
R1 is coincident with the received data Q, and 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K*2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the result of calcula- 
tion of a unidirectional function using the infor- 
mation indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2 is coincident 
with the received data R 

11. The information processing system as claimed in 
claim 9, wherein the first information processing 



apparatus and the second information processing 
apparatus generate the encryption key K1, the 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
5 result of calculation of the unidirectional function. 

12. The information processing system as claimed in 
claim 11, wherein the first information processing 
apparatus and the second information processing 

io apparatus generate the data P, the data Q\ the data 
Q and the data P\ using a bit value of a part of the 
result of calculation of the unidirectional function. 

13. The information processing system as claimed in 
75 claim 11 , wherein the first information processing 

apparatus and the second information processing 
apparatus generate the encryption key K1, the 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a least significant n bits of 
20 the result of calculation of the unidirectional func- 

tion. 



14. The information processing system as claimed in 
claim 13. wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data P, the data Q\ the data 
Q and the data P\ using a most significant m bits of 
the result of calculation of the unidirectional func- 
tion. 

15. The information processing system as claimed in 
claim 8, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the generated random number S1 and the 
received random number R1, and generates the 
encryption key K2 used for encrypting the data to 
be transmitted in the second transmission mode, on 
the basis of the result of calculation of a unidirec- 
tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the generated 
random number S2 and the received random 
number R2, and 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis of the result of cal- 
culation of a unidirectional function with respect 
to concatenated data formed by concatenating 
the information indicating the validity of the 
apparatus itself, the received random number 
S1 and the generated random number R1 , and 
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generates the encryption key K'2 used for 
decoding the data transmitted in the second 
transmission mode, on the basis of the result of 
calculation of a unidirectional function with 
respect to concatenated data formed by con- 5 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number S2 and the generated random number 
R2. 

w 

16. The information processing system as claimed in 
claim 15, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion with respect to concatenated data formed by 75 
concatenating the information indicating the validity 
of the apparatus itself, the generated random 
number S2 and the received random number R2, to 
the second information processing apparatus, 

20 

the second information processing apparatus 
transmits data Q generated on the basis of the 
result of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 25 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 
number R1, to the first information processing 
apparatus, 

30 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 35 
in the second transmission mode in the case 
where data Q* generated on the basis of the 
result of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 40 
validity of the apparatus itself, the generated 
random number S1 and the received random 
number R1 is coincident with the received data 
Q, and 

45 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 50 
transmission mode in the case where data P* 
generated on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating 
the information indicating the validity of the 55 
apparatus itself, the received random number 
S2 and the generated random number R2 is 
coincident with the received data P. 



1 7. The information processing system as claimed in 
claim 6, wherein the first information processing 
apparatus and the second information processing 
apparatus generate either one of the encryption key 
used for encrypting the data to be transmitted in the 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 
received random number, and generate the encryp- 
tion key of the other transmission mode on the 
basis of the generated encryption key, the gener- 
ated random number and the received random 
number. 

8. The information processing system as claimed in 
claim 17, wherein the first information processing 
apparatus generates either one of the encryption 
key used for encrypting the data to be transmitted in 
the first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the received random number and the gener- 
ated random number, and transmits data P gener- 
ated on the basis of the generated encryption key, 
the received random number and the generated 
random number to the second information process- 
ing apparatus, 

the second information processing apparatus 
generates either one of the encryption key 
used for decoding the data transmitted in the 
first transmission mode and the encryption key 
used for decoding the data transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the appara- 
tus itself, the received random number and the 
generated random number, and verifies 
whether or not data P' generated on the basis 
of the generated encryption key, the received 
random number and the generated random 
number is coincident with the received data P, 
and in the case where the data P* is coincident 
with the data P t transmits data Q generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the received random 
number and the generated random number to 
the first information processing apparatus and 
generates the encryption key of the transmis- 
sion mode for which the encryption key is not 
generated yet, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
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number and the generated random number, 
and 

the first information processing apparatus gen- 
erates the encryption key of the transmission 5 
mode for which the encryption key is not yet 
generated, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 10 
transmission mode for which the encryption 
key is already generated, the received random 
number and the generated random number, in 
the case where data Q* generated on the basis 
of the information indicating the validity of the 15 
apparatus itself, the received random number 
and the generated random number is coinci- 
dent with the received data Q. 

19. The information processing system as claimed in 20 
claim 18, wherein the second information process- 
ing apparatus generates two random numbers R1 
and R2 and transmits them to the first information 
processing apparatus, 

25 

the first information processing apparatus gen- 
erates two random numbers S1 and S2 and 
transmits them to the second information 
processing apparatus, 

30 

the first information processing apparatus gen- 
erates one encryption key K1 of the encryption 
key used for encrypting the data to be transmit- 
ted in the first transmission mode and the 
encryption key used for encrypting the data to 35 
be transmitted in the second transmission 
mode, on the basis of the information indicating 
the validity of the apparatus Itself, the received 
random number R1 and the generated random 
number S1 , and transmits data P generated on 40 
the basis of the generated encryption key K1, 
the received random number R2 and the gen- 
erated random number S2 to the second infor- 
mation processing apparatus, 

45 

the second information processing apparatus 
generates one encryption key K'1 of the 
encryption key used for decoding the data 
transmitted in the first transmission mode and 
the encryption key used for decoding the data so 
transmitted in the second transmission mode, 
on the basis of the information indicating the 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 
number R1 , and verifies whether or not data P' 55 
generated on the basis of the generated 
encryption key K'1, the received random 
number S2 and the generated random number 



R2 is coincident with the received data P, and in 
the case where the data P' is coincident with 
the data P, transmits data Q generated on the 
basis of the information indicating the validity of 
the apparatus itself, the received random 
number S1 and the generated random number 
R1 to the first information processing appara- 
tus and generates the encryption key K'2 of the 
transmission mode for which the encryption 
key is not generated yet, of the encryption keys 
used for decoding the data transmitted in the 
first transmission mode and the second trans- 
mission mode, on the basis of the encryption 
key K*1 of the transmission mode for which the 
encryption key is already generated, the 
received random number S2 and the generated 
random number R2, and 

the first information processing apparatus gen- 
erates the encryption key K2 of the transmis- 
sion mode for which the encryption key is not 
yet generated, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key K1 of 
the transmission mode for which the encryption 
key is already generated, the received random 
number R2 and the generated random number 
S2, in the case where data Q* generated on the 
basis of the information indicating the validity of 
the apparatus itself, the received random 
number R1 and the generated random number 
S1 is coincident with the received data Q. 

20. The information processing system as claimed in 
claim 19, wherein the first information processing 
apparatus generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function using the information indicating the validity 
of the apparatus itself, the received random number 
R1 and the generated random number S1, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function 
using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2, and 

the second information processing apparatus 
generates the encryption key K'1 on the basis 
of the result of calculation of a unidirectional 
function using the information indicating the 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 
number R1, and generates the encryption key 
K*2 on the basis of the result of calculation of a 
unidirectional function using the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
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R2. 

21. The information processing system as claimed in 
claim 20, wherein the first information processing 
apparatus transmits data P generated on the basis 5 
of the result of calculation of the unidirectional func- 
tion using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, 10 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function using the generated encryption key is 
K'1, the received random number S2 and the 
generated random number R2 is coincident 
with the received data P. and in the case where 
the data P' is coincident with the data R trans- 
mits data Q generated on the basis of the result 20 
of calculation of the unidirectional function 
using the information indicating the validity of 
the apparatus itself, the received random 
number S1 and the generated random number 
R1 to the first information processing appara- 25 
tus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q' generated on the basis of the result of 30 
calculation of the unidirectional function using 
the information indicating the validity of the 
apparatus itself, the received random number 
R1 and the generated random number S1 is 
coincident with the received data Q. 35 

22. The information processing system as claimed in 
claim 20, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 40 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

23. The information processing system as claimed in 45 
claim 22, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 

Q and the data P\ using a bit value of a part of the 
result of calculation of the unidirectional function. so 

24. The information processing system as claimed in 
claim 22, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 55 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using the least significant n bits 

of the result of calculation of the unidirectional func- 



tion. 

25. The information processing system as claimed in 
claim 24, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 
Q and the data P\ using the most significant m bits 
of the result of calculation of the unidirectional func- 
tion. 

26. The information processing system as claimed in 
claim 19, wherein the first information processing 
apparatus generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 
by concatenating the information indicating the 
validity of the apparatus itself, the received random 
number R1 and the generated random number, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the information indicating the generated 
encryption key K1, the received random number R2 
and the generated random number S2, and 

the second information processing apparatus 
generates the encryption key K'1 on the basis 
of the result of calculation of a unidirectional 
function with respect to concatenated data 
formed by concatenating the information indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 , and generates the encryp- 
tion key K'2 on the basis of the result of calcu- 
lation of a unidirectional function with respect to 
concatenated data formed by concatenating 
the generated encryption key K'1, the received 
random number S2 and the generated random 
number R2. 

27. The information processing system as claimed in 
claim 26, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key K1 , the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function with respect to concatenated data 
formed by concatenating the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2 is coincident with the received data R and in 
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the case where the data P' is coincident with 
the data P, transmits data Q generated on the 
basis of the result of calculation of the unidirec- 
tional function with respect to concatenated 
data formed by concatenating the information 5 
indicating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 to the first information 
processing apparatus, and 

10 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q* generated on the basis of the result of 
calculation of the unidirectional function with 
respect to concatenated data formed by con- is 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number R1 and the generated random number 
S1 is coincident with the received data Q. 

20 

28. An information processing method for performing 
data transmission between a first information 
processing apparatus and a second information 
processing apparatus via an interface having a first 
transmission mode in which a transmission band is 25 
ensured and a second transmission mode in which 
a transmission band is not ensured, the method 
comprising the steps of: 

encrypting data requiring the assurance of the 30 
transmission band from the first information 
processing apparatus by a first encryption key 
and then transmitting the data in the first trans- 
mission mode, while encrypting related data 
relating to the data by a second encryption key 35 
and then transmitting the related data in the 
second transmission mode; and 

decoding, by the first encryption key on the 
side of the second information processing 40 
apparatus, the data requiring the assurance of 
the transmission band which is received in the 
first transmission mode, and decoding, by the 
second encryption key, the related data 
received in the second transmission. 45 

29. The information processing method as claimed in 
claim 28, wherein prior to data transmission, a pro- 
tocol for performing mutual authentication and 
sharing a plurality of encryption keys between the so 
first information processing apparatus and the sec- 
ond information processing apparatus is executed. 

30. The information processing method as claimed in 
claim 28, wherein music data is transmitted in the 55 
first transmission mode and related data relating to 

the music data is transmitted in the second trans- 
mission mode. 



. The information processing method as claimed in 
claim 28, wherein the first information processing 
apparatus and the second information processing 
apparatus are connected with each other via an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 
ard, for transmitting data requiring the assurance of 
a transmission band in an isochronous transmis- 
sion mode and for transmitting related data relating 
to the data in an asynchronous transmission mode. 

L The information processing method as claimed in 
claim 31, wherein prior to data transmission, a pro- 
tocol for performing mutual authentication and 
sharing a plurality of encryption keys between the 
first information processing apparatus and the sec- 
ond information processing apparatus is executed 
in an asynchronous transmission mode. 

3. The information processing method as claimed in 
claim 28, wherein the second information process- 
ing apparatus generates two random numbers and 
transmits them to the first information processing 
apparatus, 

the first information processing apparatus gen- 
erates two random numbers and transmits 
them to the second information processing 
apparatus, 

the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for 
encrypting the data to be transmitted in the 
second transmission mode on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number and 
the received random number, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 
mode and an encryption key used for decoding 
the data transmitted in the second transmission 
mode on the basis of information indicating the 
validity of the apparatus itself, the generated 
random number and the received random 
number. 

34. The information processing method as claimed in 
claim 33, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the information indicating the validity of the appa- 
ratus itself, the generated random number and the 
received random number, to the second information 
processing apparatus, 
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the second information processing apparatus 
transmits data Q generated on the basis of the 
information indicating the validity of the appara- 
tus itself; the generated random number and 
the received random number, to the first infor- 5 
mation processing apparatus, 
the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for w 
encrypting the data to be transmitted in the 
second transmission mode in the case where 
data Q* generated on the basis of the informa- 
tion indicating the validity of the apparatus 
itself; the generated random number and the 15 
received random number is coincident with the 
received data Q, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 20 36. 
mode and an encryption key used for decoding 
the data transmitted in the second transmission 
mode in the case where data P' generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself; the generated ran- 25 
dom number and the received random number 
is coincident with the received data P. 

35. The information processing method as claimed in 

claim 34, wherein the second information process- 30 
ing apparatus generates two random numbers R1 
and R2 and transmits them to the first information 
processing apparatus, 

the first information processing apparatus gen- 35 
erates two random numbers S1 and S2 and 
transmits them to the second information 
processing apparatus, 

the first information processing apparatus 40 
transmits data P generated on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number S2 
and the received random number R2, to the 
second information processing apparatus, 45 

the second information processing apparatus 
transmits data Q generated on the basis of 
information indicating the validity of the appara- 
tus itself, the received random number S1 and so 
the generated random number R1, to the first 
information processing apparatus, 37. 

the first information processing apparatus gen- 
erates an encryption key K1 used for encrypt- 55 
ing the data to be transmitted in the first 
transmission mode and an encryption key K2 
used for encrypting the data to be transmitted 



in the second transmission mode in the case 
where data Q* generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number SI 
and the received random number Rl is coinci- 
dent with the received data Q, and 

the second information processing apparatus 
generates an encryption key K*1 used for 
decoding the data transmitted in the first trans- 
mission mode and an encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the information indi- 
cating the validity of the apparatus itserf, the 
received random number S2 and the generated 
random number R2 is coincident with the 
received data R 

The information processing method as claimed in 
claim 35, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the validity of the apparatus itself, 
the generated random number S1 and the received 
random number R1 , and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, and 

the second information processing apparatus 
generates the encryption key K'l used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis of the result of cal- 
culation of a unidirectional function using the 
information indicating the validity of the appara- 
tus itserf, the received random number S1 and 
the generated random number R1 , and gener- 
ates the encryption key K'2 used for decoding 
the data transmitted in the second transmission 
mode, on the basis of the result of calculation 
of a unidirectional function using the informa- 
tion indicating the validity of the apparatus 
itserf, the received random number S2 and the 
generated random number R2. 

The information processing method as claimed in 
claim 36, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, to the sec- 
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ond information processing apparatus, 

the second information processing apparatus 
transmits data Q generated on the basis of the 
result of calculation of a unidirectional function 5 
using the information indicating the validity of 
the apparatus itself, the received random 
number SI and the generated random number 
R1, to the first information processing appara- 
tus, io 
the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 15 
in the second transmission mode in the case 
where data Q* generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, the generated random 20 
number S1 and the received random number 
R1 is coincident with the received data Q, and 
the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 25 
mission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the result of calcula- 
tion of a unidirectional function using the infor- 30 
mation indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2 is coincident 
with the received data P. 

35 

38. The information processing method as claimed in 
claim 36, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 
encryption key K2, the encryption key K'1 and the 40 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

39. The information processing method as claimed in 
claim 38, wherein the first information processing 45 
apparatus and the second information processing 
apparatus generate the data R the data Q 1 , the data 

Q and the data P', using a bit value of a part of the 
result of calculation of the unidirectional function. 

50 

40. The information processing method as claimed in 
claim 38, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 
encryption key K2, the encryption key K'1 and the 55 
encryption key K'2, using the least significant n bits 

of the result of calculation of the unidirectional func- 
tion. 



41. The information processing method as claimed in 
claim 40, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data P, the data Q\ the data 
Q and the data P\ using the most significant m bits 
of the result of calculation of the unidirectional func- 
tion. 

42. The information processing method as claimed in 
claim 35, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
"itself, the generated random number S1 and the 
received random number R1, and generates the 
encryption key K2 used for encrypting the data to 
be transmitted in the second transmission mode, on 
the basis of the result of calculation of a unidirec- 
tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the generated 
random number S2 and the received random 
number R2, and 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis of the result of cal- 
culation of a unidirectional function with respect 
to concatenated data formed by concatenating 
the information indicating the validity of the 
apparatus itself, the received random number 
S1 and the generated random number R1 , and 
generates the encryption key K'2 used for 
decoding the data transmitted in the second 
transmission mode, on the basis of the result of 
calculation of a unidirectional function with 
respect to concatenated data formed by con- 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number S2 and the generated random number 
R2. 

43. The information processing method as claimed in 
claim 42, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the information indicating the validity 
of the apparatus itself, the generated random 
number S2 and the received random number R2, to 
the second information processing apparatus, 

the second information processing apparatus 
transmits data Q generated on the basis of the 
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result of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 
validity of the apparatus itself, the received ran- 
dom number Si and the generated random 5 
number R1, to the first information processing 
apparatus, 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 10 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 
in the second transmission mode in the case 
where data Q' generated on the basis of the 
result of calculation of a unidirectional function is 
with respect to concatenated data formed by 
concatenating the information indicating the 
validity of the apparatus itself, the generated 
random number S1 and the received random 
number R1 is coincident with the received data 20 
Q, and 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 25 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating 30 
the information indicating the validity of the 
apparatus itself, the received random number 
S2 and the generated random number R2 is 
coincident with the received data P. 

35 

44. The information processing method as claimed in 
claim 33, wherein the first information processing 
apparatus and the second information processing 
apparatus generate either one of the encryption key 
used for encrypting the data to be transmitted in the 40 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the as 
received random number, and generate the encryp- 
tion key of the other transmission mode on the 
basis of the generated encryption key, the gener- 
ated random number and the received random 
number. 50 

45. The information processing method as claimed in 
claim 44, wherein the first information processing 
apparatus generates either one of the encryption 
key used for encrypting the data to be transmitted in 
the first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 



information indicating the validity of the apparatus 
itself, the received random number and the gener- 
ated random number, and transmits data P gener- 
ated on the basis of the generated encryption key, 
the received random number and the generated 
random number to the second information process- 
ing apparatus, 

the second information processing apparatus 
generates either one of the encryption key 
used for decoding the data transmitted in the 
first transmission mode and the encryption key 
used for decoding the data transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the appara- 
tus itself, the received random number and the 
generated random number, and verifies 
whether or not data P' generated on the basis 
of the generated encryption key, the received 
random number and the generated random 
number is coincident with the received data R 
and in the case where the data P' is coincident 
with the data R transmits data Q generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the received random 
number and the generated random number to 
the first information processing apparatus and 
generates the encryption key of the transmis- 
sion mode for which the encryption key is not 
generated yet, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
number and the generated random number, 
and 

the first information processing apparatus gen- 
erates the encryption key of the transmission 
mode for which the encryption key is not yet 
generated, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
number and the generated random number, in 
the case where data Q' generated on the basis 
of the information indicating the validity of the 
apparatus itself, the received random number 
and the generated random number is coinci- 
dent with the received data Q. 

46. The information processing method as claimed in 
55 claim 45, wherein the second information process- 
ing apparatus generates two random numbers R1 
and R2 and transmits them to the first information 
processing apparatus, 
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the first information processing apparatus gen- 
erates two random numbers S1 and S2 and 
transmits them to the second information 
processing apparatus, 

5 

the first information processing apparatus gen- 
erates one encryption key K1 of the encryption 
key used for encrypting the data to be transmit- 
ted in the first transmission mode and the 
encryption key used for encrypting the data to 10 47. 
be transmitted in the second transmission 
mode, on the basis of the information indicating 
the validity of the apparatus itserf, the received 
random number R1 and the generated random 
number S1 , and transmits data P generated on 15 
the basis of the generated encryption key K1, 
the received random number R2 and the gen- 
erated random number S2 to the second infor- 
mation processing apparatus, 

20 

the second information processing apparatus 
generates one encryption key K'1 of the 
encryption key used for decoding the data 
transmitted in the first transmission mode and 
the encryption key used for decoding the data 25 
transmitted in the second transmission mode, 
on the basis of the information indicating the 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 
number R1 , and verifies whether or not data P' 30 
generated on the basis of the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2 is coincident with the received data P, and in 
the case where the data P' is coincident with 35 
the data P, transmits data Q generated on the 48 
basis of the information indicating the validity of 
the apparatus itself, the received random 
number S1 and the generated random number 
R1 to the first information processing appara- 40 
tus and generates the encryption key K'2 of the 
transmission mode for which the encryption 
key is not generated yet, of the encryption keys 
used for decoding the data transmitted in the 
first transmission mode and the second trans- 45 
mission mode, on the basis of the encryption 
key K'1 of the transmission mode for which the 
encryption key is already generated, the 
received random number S2 and the generated 
random number R2, and so 

the first information processing apparatus gen- 
erates the encryption key K2 of the transmis- 
sion mode for which the encryption key is not 
yet generated, of the encryption keys used for 55 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key K1 of 



the transmission mode for which the encryption 
key is already generated, the received random 
number R2 and the generated random number 
S2, in the case where data Q* generated on the 
basis of the information indicating the validity of 
the apparatus itserf, the received random 
number R1 and the generated random number 
S1 is coincident with the received data Q. 

The information processing method as claimed in 
claim 46, wherein the first information processing 
apparatus generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function using the information indicating the validity 
of the apparatus itself, the received random number 
R1 and the generated random number S1, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function 
using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2, and 

the second information processing apparatus 
generates the encryption key K'1 on the basis 
of the result of calculation of a unidirectional 
function using the information indicating the 
validity of the apparatus itserf, the received ran- 
dom number S1 and the generated random 
number R1 , and generates the encryption key 
K'2 on the basis of the result of calculation of a 
unidirectional function using the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2. 

, The information processing method as claimed in 
claim 47, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of the unidirectional func- 
tion using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function using the generated encryption key 
K'1, the received random number S2 and the 
generated random number R2 is coincident 
with the received data P, and in the case where 
the data P' is coincident with the data R trans- 
mits data Q generated on the basis of the result 
of calculation of the unidirectional function 
using the information indicating the validity of 
the apparatus itserf, the received random 
number S1 and the generated random number 
R1 to the first information processing appara- 
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tus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q' generated on the basis of the result of 5 
calculation of the unidirectional function using 
the information indicating the validity of the 
apparatus itself, the received random number 
R1 and the generated random number SI is 
coincident with the received data Q. io 



49. The information processing method as claimed in 
claim 47, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 15 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

50. The information processing method as claimed in 20 
claim 49, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 

Q and the data P' t using a bit value of a part of the 
result of calculation of the unidirectional function. 25 

51. The information processing method as claimed in 
claim 49, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 30 
encryption key K2, the encryption key K1 and the 
encryption key K'2, using the least significant n bits 

of the result of calculation of the unidirectional func- 
tion. 

35 

52. The information processing method as claimed in 
claim 51, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data P, the data Q', the data 

Q and the data P\ using the most significant m bits 40 
of the result of calculation of the unidirectional func- 
tion. 

53. The information processing method as claimed in 
claim 46, wherein the first information processing 45 
apparatus generates the encryption key Kl on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 

by concatenating the information indicating the 
validity of the apparatus itself, the received random 50 
number R1 and the generated random number, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the information indicating the generated 55 
encryption key K1 , the received random number R2 
and the generated random number S2, and 



the second information processing apparatus 
generates the encryption key K'1 on the basis 
of the result of calculation of a unidirectional 
function with respect to concatenated data 
formed by concatenating the information indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 , and generates the encryp- 
tion key K'2 on the basis of the result of calcu- 
lation of a unidirectional function with respect to 
concatenated data formed by concatenating 
the generated encryption key K'1 , the received 
random number S2 and the generated random 
number R2. 

54. The information processing method as claimed in 
claim 53, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key K1 , the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function with respect to concatenated data 
formed by concatenating the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2 is coincident with the received data P, and in 
the case where the data P' is coincident with 
the data P, transmits data Q generated on the 
basis of the result of calculation of the unidirec- 
tional function with respect to concatenated 
data formed by concatenating the information 
indicating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 to the first information 
processing apparatus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q' generated on the basis of the result of 
calculation of the unidirectional function with 
respect to concatenated data formed by con- 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number R1 and the generated random number 
S1 is coincident with the received data Q. 

55. An information processing apparatus comprising: 
an interface having a first transmission mode in 
which a transmission band is ensured and a second 
transmission mode in which a transmission band is 
not ensured; and transmission control means for 
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encrypting data requiring the assurance of the 
transmission band by a first encryption key and 
then transmitting the data in the first transmission 
mode via the interface and for encrypting related 
data relating to the data by a second encryption key 5 
and then transmitting the related data in the second 
transmission mode via the interface. 

56. The information processing apparatus as claimed 

in claim 55, wherein the transmission control 10 
means executes, prior to data transmission, a pro- 
tocol for performing mutual authentication and 
sharing a plurality of encryption keys with the other 
information processing apparatus. 

15 

57. The information processing apparatus as claimed 
in claim 55, wherein the transmission control 
means transmits music data in the first transmis- 
sion mode and transmits related data relating to the 
music data in the second transmission mode. 20 

58. The information processing apparatus as claimed 
in claim 55, further comprising, as the interface, an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 25 
ard, wherein the transmission control means trans- 
mits data requiring the assurance of a transmission 
band in an isochronous transmission mode and 
transmits related data relating to the data in an 
asynchronous transmission mode. 30 

59. The information processing apparatus as claimed 
in claim 58, wherein the transmission control 
means executes, prior to data transmission, a pro- 
tocol for performing mutual authentication and 35 
sharing a plurality of encryption keys with the other 
information processing apparatus in an asynchro- 
nous transmission mode. 

60. The information processing apparatus as claimed 40 
in claim 55, wherein the transmission control 
means generates two random numbers and trans- 
mits them to the other information processing appa- 
ratus, then receives two random numbers 
generated by the other information processing 45 
apparatus, and generates an encryption key used 

for encrypting the data to be transmitted in the first 
transmission mode and an encryption key used for 
encrypting the data to be transmitted in the second 
transmission mode on the basis of information indi- so 
eating the validity of the apparatus itself, the gener- 
ated random number and the received random 
number. 

61. The information processing apparatus as claimed ss 
in claim 60, wherein the transmission control 
means transmits data P generated on the basis of 
the information indicating the validity of the appara- 



tus itself, the generated random number and the 
received random number, to the other information 
processing apparatus, then receives data Q gener- 
ated by the other information processing apparatus 
on the basis of the information indicating the validity 
of the apparatus itself, the received random number 
and the generated random number, and generates 
an encryption key used for encrypting the data to be 
transmitted in the first transmission mode and an 
encryption key used for encrypting the data to be 
transmitted in the second transmission mode in the 
case where data Q 1 generated on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 
received random number is coincident with the 
received data Q. 

62. The information processing apparatus as claimed 
in claim 61, wherein the transmission control 
means receives a random number R2 generated by 
the other information processing apparatus, gener- 
ates two random numbers S1 and S2 and transmits 
them to the other information processing appara- 
tus, transmits data P generated on the basis of 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2 to the other informa- 
tion processing apparatus, receives data Q gener- 
ated by the other information processing apparatus 
on the basis of information indicating the validity of 
the apparatus itself, the received random number 
S1 and the generated random number R1, and 
generates an encryption key K1 used for encrypting 
the data to be transmitted in the first transmission 
mode and an encryption key K2 used for encrypting 
the data to be transmitted in the second transmis- 
sion mode in the case where data Q' generated on 
the basis of the Information indicating the validity of 
the apparatus itself, the generated random number 

51 and the received random number R1 is coinci- 
dent with the received data Q. 

63. The information processing apparatus as claimed 
in claim 62, wherein the transmission control 
means generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the validity of the apparatus itself, 
the generated random number S1 and the received 
random number R1, and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 

52 and the received random number R2. 
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64. The information processing apparatus as claimed 
in claim 63, wherein the transmission control 
means transmits data P generated on the basis of 
the result of calculation of a unidirectional function 
using the information indicating the validity of the 5 
apparatus itself, the generated random number S2 
and the received random number R2 to the other 
information processing apparatus, receives data Q 
generated by the other information processing 
apparatus on the basis of the result of calculation of K 
a unidirectional function using the information indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1, and generates the encryption 
key K1 used for encrypting the data to be transmit- 15 
ted in the first transmission mode and the encryp- 
tion key K2 used for encrypting the data to be 
transmitted in the second transmission mode in the 
case where data Q* generated on the basis of the 
result of calculation of a unidirectional function 2 o 
using the information indicating the validity of the 
apparatus itself, the generated random number St 
and the received random number R1 is coincident 
with the received data Q. 

25 

65. The information processing apparatus as claimed 
in claim 63, wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using a bit value of a part of the 
result of calculation of the unidirectional function. 30 

66. The information processing apparatus as claimed 
in claim 65, wherein the transmission control 
means generates the data P and the data Q', using 

a bit value of a part of the result of calculation of the 35 
unidirectional function. 

67. The information processing apparatus as claimed 
in claim 65, wherein the transmission control 
means generates the encryption key K1 and the 40 
encryption key K2, using the least significant n bits 

of the result of calculation of the unidirectional func- 
tion. 

68. The information processing apparatus as claimed 45 
in claim 67, wherein the transmission control 
means generates the data P and the data Q' ( using 

the most significant m bits of the result of calcula- 
tion of the unidirectional function. 

50 

69. The information processing apparatus as claimed 
in claim 62, wherein the transmission control 
means generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- ss 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 



itself, the generated random number S1 and the 
received random number R1, and generates the 
encryption key K2 used for encrypting the data to 
be transmitted in the second transmission mode, on 
the basis of the result of calculation of a unidirec- 
tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the generated 
random number S2 and the received random 
number R2. 

f 0. The information processing apparatus as claimed 
in claim 69, wherein the transmission control 
means transmits data P generated on the basis of 
the result of calculation of a unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, to the 
other information processing apparatus, receives 
data Q generated by the other information process- 
ing apparatus on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S1 and the gen- 
erated random number R1, and generates the 
encryption key K1 used for encrypting the data to 
be transmitted in the first transmission mode and 
the encryption key K2 used for encrypting the data 
to be transmitted in the second transmission mode 
in the case where data Q' generated on the basis of 
the result of calculation of a unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the generated random number 
Si and the received random number R1 is coinci- 
dent with the received data Q. 

I. The information processing apparatus as claimed 
in claim 60, wherein the transmission control 
means generates either one of the encryption key 
used for encrypting the data to be transmitted in the 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 
received random number, and generates the 
encryption key of the other transmission mode on 
the basis of the generated encryption key, the gen- 
erated random number and the received random 
number. 

!. The information processing apparatus as claimed 
in claim 71, wherein the transmission control 
means generates either one of the encryption key 
used for encrypting the data to be transmitted in the 
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first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the received random number and the gener- 5 
ated random number, transmits data P generated 
on the basis of the generated encryption key, the 
received random number and the generated ran- 
dom number to the other information processing 
apparatus, receives data Q generated by the other w 
information processing apparatus on the basis of 
the information indicating the validity of the appara- 
tus itself, the received random number and the gen- 
erated random number, and generates the 
encryption key of the transmission mode for which 15 
the encryption key is not yet generated, of the 
encryption keys used for decoding the data trans- 
mitted in the first transmission mode and the sec- 
ond transmission mode, on the basis of the 
encryption key of the transmission mode for which 20 
the encryption key is already generated, the 
received random number and the generated ran- 
dom number, in the case where data Q' generated 
on the basis of the information indicating the validity 
of the apparatus itself, the received random number 2 s 
and the generated random number is coincident 
with the received data Q. 

73. The information processing apparatus as claimed 
in claim 72, wherein the transmission control 30 
means receives two random numbers R1 and R2 
generated by the other information processing 
apparatus, generates two random numbers S1 and 
S2 and transmits them to the other information 
processing apparatus, generates one encryption 35 
key K1 of the encryption key used for encrypting the 
data to be transmitted in the first transmission mode 
and the encryption key used for encrypting the data 
to be transmitted in the second transmission mode, 
on the basis of the information indicating the validity 40 
of the apparatus itself, the received random number 
R1 and the generated random number S1 , trans- 
mits data P generated on the basis of the generated 
encryption key K1 , the received random number R2 
and the generated random number S2 to the other 45 
information processing apparatus, receives data Q 
generated by the other information processing 
apparatus on the basis of the information indicating 
the validity of the apparatus itself, the received ran- 
dom number S1 and the generated random number 50 
R1, and generates the encryption key K2 of the 
transmission mode for which the encryption key is 
not yet generated, of the encryption keys used for 
decoding the data transmitted in the first transmis- 
sion mode and the second transmission mode, on 55 
the basis of the encryption key K1 of the transmis- 
sion mode for which the encryption key is already 
generated, the received random number R2 and 
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the generated random number S2, in the case 
where data Q' generated on the basis of the infor- 
mation indicating the validity of the apparatus itself, 
the received random number R1 and the generated 
random number S1 is coincident with the received 
data Q. 

74. The information processing apparatus as claimed 
in claim 73, wherein the transmission control 
means generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function using the information indicating the validity 
of the apparatus itself, the received random number 
R1 and the generated random number S1, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function 
using the generated encryption key K1 t the 
received random number R2 and the generated 
random number S2. 

I 

75. The information processing apparatus as claimed 
in claim 74, wherein the transmission control 
means transmits data P generated on the basis of 
the result of calculation of the unidirectional func- 
tion using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2 to the other information 
processing apparatus, receives data Q generated 
by the other information processing apparatus on 
the basis of the result of calculation of the unidirec- 
tional function using the information indicating the 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1, 
and generates the encryption key K2 in the case 
where data Q' generated on the basis of the result 
of calculation of the unidirectional function using the 
information indicating the validity of the apparatus 
itself, the received random number R1 and the gen- 
erated random number S1 is coincident with the 
received data Q. 

76. The information processing apparatus as claimed 
in claim 74, wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

77. The information processing apparatus as claimed 
in claim 76, wherein the transmission control 
means generates the data P and the data Q\ using 
a bit value of a part of the result of calculation of the 
unidirectional function. 

78. The information processing apparatus as claimed 
in claim 76, wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using the least significant n bits 
of the result of calculation of the unidirectional func- 
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tion. 

79. The information processing apparatus as claimed 
in claim 78, wherein the transmission control 
means generates the data P and the data Q\ using 
the most significant m bits of the result of calcula- 
tion of the unidirectional function. 

80. The information processing apparatus as claimed 
in claim 73, wherein the transmission control 
means generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 
by concatenating the information indicating the 
validity of the apparatus itself, the received random 
number R1 and the generated random number, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the information indicating the generated 20 
encryption key K1 , the received random number R2 
and the generated random number S2. 

81. The information processing apparatus as claimed 86. 
in claim 80, wherein the transmission control 25 
means transmits data P generated on the basis of 
the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key K1 , the 
received random number R2 and the generated 30 
random number S2 to the other information 87. 
processing apparatus, receives data Q generated 
by the other information processing apparatus on 
the basis of the result of calculation of the unidirec- 
tional function with respect to concatenated data 35 
formed by concatenating the information indicating 
the validity of the apparatus itself, the received ran- 
dom number S1 and the generated random number 
R1, and generates the encryption key K2 in the 
case where data Q' generated on the basis of the 40 
result of calculation of the unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the received random number 
R1 and the generated random number S1 is coinci- 45 88. 
dent with the received data Q. 

82. An information processing apparatus comprising: 
an interface having a first transmission mode in 
which a transmission band is ensured and a second 50 
transmission mode in which a transmission band is 
not ensured; and receiving control means for 
decoding, by a first encryption key, the data requir- 
ing the assurance of the transmission band which is 
received in the first transmission mode via the inter- 55 
face and for decoding, by a second encryption key, 
the related data received in the second transmis- 
sion mode via the interface. 



83. The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 
executes, prior to data transmission, a protocol for 
performing mutual authentication and sharing a plu- 

5 rality of encryption keys with the other information 

processing apparatus. 

84. The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 

10 transmits music data in the first transmission mode 
and transmits related data relating to the music 
data in the second transmission mode. 

85. The information processing apparatus as claimed 
in claim 82, further comprising, as the interface, an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 
ard, wherein the receiving control means receives 
data requiring the assurance of a transmission 
band in an isochronous transmission mode and 
receives related data relating to the data in an asyn- 
chronous transmission mode. 

The information processing apparatus as claimed 
in claim 85, wherein the receiving control means 
executes, prior to data transmission, a protocol for 
performing mutual authentication and sharing a plu- 
rality of encryption keys with the other information 
processing apparatus. 

The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 
generates two random numbers and transmits them 
to the other information processing apparatus, 
receives two random numbers generated by the 
other information processing apparatus, and gener- 
ates an encryption key used for decoding the data 
transmitted in the first transmission mode and an 
encryption key used for decoding the data transmit- 
ted in the second transmission mode on the basis 
of information indicating the validity of the appara- 
tus itself, the generated random number and the 
received random number. 

The information processing apparatus as claimed 
in claim 87, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the informa- 
tion indicating the validity of the apparatus itself, the 
generated random number and the received ran- 
dom number, 

transmits data Q generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number and 
the received random number to the other infor- 
mation processing apparatus, and generates 
an encryption key used for decoding the data 
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transmitted in the first transmission mode and 
an encryption key used for decoding the data 
transmitted in the second transmission mode in 
the case where data P* generated on the basis 
of the information indicating the validity of the 5 
apparatus itself, the generated random number 
and the received random number is coincident 
with the received data P. 

89. The information processing apparatus as claimed w 
in claim 88, wherein the receiving control means 
generates two random numbers R1 and R2 and 
transmits them to the other information processing 
apparatus, receives two random numbers S1 and 
S2 generated by the other information processing 15 
apparatus, receives data P generated by the other 
information processing apparatus on the basis of 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data Q gen- 20 
erated on the basis of information indicating the 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1 
to the other information processing apparatus, and 
generates an encryption key K'1 used for decoding 25 
the data transmitted in the first transmission mode 
and an encryption key K'2 used for decoding the 
data transmitted in the second transmission mode 
in the case where data P" generated on the basis of 
the information indicating the validity of the appara- 30 
tus itself, the received random number S2 and the 
generated random number R2 is coincident with the 
received data P. 



90. The information processing apparatus as claimed 
in claim 89, wherein the receiving control means 
generates the encryption key K'l used for decoding 
the data transmitted in the first transmission mode, 
on the basis of the result of calculation of a unidirec- 
tional function using the information indicating the 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1 , 
and generates the encryption key K'2 used for 
decoding the data transmitted in the second trans- 
mission mode, on the basis of the result of calcula- 
tion of a unidirectional function using the 
information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- 
erated random number R2. 

91 . The information processing apparatus as claimed 
in claim 90, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of a unidirectional function using the 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data Q gen- 



erated on the basis of the result of calculation of a 
unidirectional function using the information indicat- 
ing the validity of the apparatus itself, the received 
random number Si and the generated random 
number R1 to the other information processing 
apparatus, and generates the encryption key K'1 
used for decoding the data transmitted in the first 
transmission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' gen- 
erated on the basis of the result of calculation of a 
unidirectional function using the information indicat- 
ing the validity of the apparatus itself, the received 
random number S2 and the generated random 
number R2 is coincident with the received data P. 

92. The information processing apparatus as claimed 
in claim 90, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K'2, using a bit value of a part of the result 
of calculation of the unidirectional function. 

93. The information processing apparatus as claimed 
in claim 92, wherein the receiving control means 
generates the data Q and the data P\ using a bit 
value of a part of the result of calculation of the uni- 
directional function. 

94. The information processing apparatus as claimed 
in claim 92, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K'2, using the least significant n bits of the 
result of calculation of the unidirectional function. 



35 95. The information processing apparatus as claimed 
in claim 94, wherein the receiving control means 
generates the data Q and the data P\ using the 
most significant m bits of the result of calculation of 
the unidirectional function. 

40 

96. The information processing apparatus as claimed 
in claim 89, wherein the receiving control means 
generates the encryption key K'1 used for decoding 
the data transmitted in the first transmission mode, 

45 on the basis of the result of calculation of a unidirec- 

tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the received ran- 
dom number S1 and the generated random number 

50 R1, and generates the encryption key K*2 used for 
decoding the data transmitted in the second trans- 
mission mode, on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating the 

55 information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- 
erated random number R2. 
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97. The information processing apparatus as claimed 
in claim 96, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of a unidirectional function with respect 5 
to concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data Q gen- 
erated on the basis of the result of calculation of a 70 
unidirectional function with respect to concatenated 
data formed by concatenating the information indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 to the other information r5 
processing apparatus, and generates the encryp- 
tion key K'1 used for decoding the data transmitted 

in the first transmission mode and the encryption 
key K*2 used for decoding the data transmitted in 
I the second transmission mode in the case where 20 

data P' generated on the basis of the result of cal- 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- 2 5 
erated random number R2 is coincident with the 
received data R 

98. The information processing apparatus as claimed 

in claim 87, wherein the receiving control means 30 
generates either one of the encryption key used for 
encrypting the data to be transmitted in the first 
transmission mode and the encryption key used for 
encrypting the data to be transmitted in the second 
transmission mode, on the basis of the information 35 
indicating the validity of the apparatus itself, the 
received random number and the generated ran- 
dom number, receives data P generated by the 
other information processing apparatus on the 
[ basis of the generated encryption key, the received 40 

random number and the generated random 
number, generates either one of the encryption key 
used for decoding the data transmitted in the first 
transmission mode and the encryption key used for 
decoding the data transmitted in the second trans- 45 
mission mode, on the basis of the information indi- 
cating the validity of the apparatus itself, the 
received random number and the generated ran- 
dom number, verifies whether or not data P* gener- 
ated on the basis of the generated encryption key, so 
the received random number and the generated 
random number is coincident with the received data 
P, and in the case where the data P* is coincident 
with the data P, transmits data Q generated on the 
basis of the information indicating the validity of the 55 
apparatus itserf, the received random number and 
the generated random number to the other informa- 
tion processing apparatus and generates the 
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encryption key of the transmission mode for which 
the encryption key is not generated yet, of the 
encryption keys used for decoding the data trans- 
mitted in the first transmission mode and the sec- 
ond transmission mode, on the basis of the 
encryption key of the transmission mode for which 
the encryption key is already generated, the 
received random number and the generated ran- 
dom number. 

99. The information processing apparatus as claimed 
in claim 98, wherein the receiving control means 
generates two random numbers R1 and R2 and 
transmits them to the other information processing 
apparatus, receives two random numbers S1 and 
S2 generated by the other information processing 
apparatus, the other information processing appa- 
ratus generating one encryption key K1 of the 
encryption key used for encrypting the data to be 
transmitted in the first transmission mode and the 
encryption key used for encrypting the data to be 
transmitted in the second transmission mode on the 
basis of the information indicating the validity of the 
apparatus itself, the received random number R1 
and the generated random number S1, the receiv- 
ing control means receives data P generated on the 
basis of the generated encryption key K1, the 
received random number R2 and the generated 
random number S2, generates one encryption key 
K't of the encryption key used for decoding the data 
transmitted in the first transmission mode and the 
encryption key used for decoding the data transmit- 
ted in the second transmission mode on the basis 
of the information indicating the validity of the appa- 
ratus itself, the received random number S1 and the 
generated random number R1, verifies whether or 
not data P' generated on the basis of the generated 
encryption key K'1, the received random number 
S2 and the generated random number R2 is coinci- 
dent with the received data P, and in the case where 
the data P* is coincident with the data P, transmits 
data Q generated on the basis of the information 
indicating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 to the other information 
processing apparatus and generates the encryp- 
tion key K'2 of the transmission mode for which the 
encryption key is not generated yet, of the encryp- 
tion keys used for decoding the data transmitted in 
the first transmission mode and the second trans- 
mission mode, on the basis of the encryption key 
K*1 of the transmission mode for which the encryp- 
tion key is already generated, the received random 
number S2 and the generated random number R2. 

100. The information processing apparatus as claimed 
in claim 99, wherein the receiving control means 
generates the encryption key K'1 on the basis of the 
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result of calculation of a unidirectional function 
using the information indicating the validity of the 
apparatus itself, the received random number S1 
and the generated random number R1, and gener- 
ates the encryption key K'2 on the basis of the 5 
result of calculation of a unidirectional function 
using the generated encryption key K'1, the 
received random number S2 and the generated 
random number R2. 

10 

101 .The information processing apparatus as claimed 
in claim 1 00, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of the unidirectional function using the 15 
generated encryption key K1 , the received random 
number R2 and the generated random number S2, 
verifies whether or not data P' generated on the 
basis of the result of calculation of the unidirectional 
function using the generated encryption key K'1, 20 
the received random number S2 and the generated 
random number R2 is coincident with the received 
data P, and in the case where the data P' is coinci- 
dent with the data R transmits data Q generated on 
the basis of the result of calculation of the unidirec- 25 
tional function using the information indicating the 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1 
to the other information processing apparatus. 

30 

102.The information processing apparatus as claimed 
in claim 1 00, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K*2, using a bit value of a part of the result 
of calculation of the unidirectional function. 35 



respect to concatenated data formed by concate- 
nating the information indicating the validity of the 
apparatus itself, the received random number S1 
and the generated random number R1 , and gener- 
ates the encryption key K'2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the generated encryption key K'1, the 
received random number S2 and the generated 
random number R2. 

'.The information processing apparatus as claimed 
in claim 106, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of the unidirectional function with 
respect to concatenated data formed by concate- 
nating the generated encryption key K1, the 
received random number R2 and the generated 
random number S2, verifies whether or not data P' 
generated on the basis of the result of calculation of 
the unidirectional function with respect to concate- 
nated data formed by concatenating the generated 
encryption key K'1, the received random number 
S2 and the generated random number R2 is coinci- 
dent with the received data R and in the case where 
the data P' is coincident with the data R transmits 
data Q generated on the basis of the result of calcu- 
lation of the unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S1 and the gen- 
erated random number R1 to the other information 
processing apparatus. 



103.The information processing apparatus as claimed 
in claim 102, wherein the receiving control means 
generates the data Q and the data P\ using a bit 
value of a part of the result of calculation of the uni- 40 
directional function. 



104.The information processing apparatus as claimed 
in claim 102, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 45 
tion key K'2, using the least significant n bits of the 
result of calculation of the unidirectional function. 



105. The information processing apparatus as claimed 

in claim 104, wherein the receiving control means so 
generates the data Q and the data P\ using the 
most significant m bits of the result of calculation of 
the unidirectional function. 

106. The information processing apparatus as claimed 55 
in claim 99, wherein the receiving control means 
generates the encryption key K'1 on the basis of the 
result of calculation of a unidirectional function with 
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